Static task
static1
Behavioral task
behavioral1
Sample
381d5cd2ddd947ceb60069bcd386b1ae_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
381d5cd2ddd947ceb60069bcd386b1ae_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
381d5cd2ddd947ceb60069bcd386b1ae_JaffaCakes118
-
Size
143KB
-
MD5
381d5cd2ddd947ceb60069bcd386b1ae
-
SHA1
20b601f41d401ecf48855f2de5cff9a481f3dcdc
-
SHA256
698aa374e11f0971c20a23d5c1f5a564df491ebc597236ab1b231d232043ee0b
-
SHA512
9214fdb047cfa02a24098911e18d51910fe2c10c506810c0813530d9fb614e8504f5211aaeacfd41793ae75d4c3ed7d6d053df8dc036c2d59e7a4a23affc6e61
-
SSDEEP
3072:xCVrYBly+WSG9G7+mVIqVSJrF4DhkeThDH/I/J8yEojD6Nxq:xCqDyK7NVIqVSL4DzAh8yrD+xq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 381d5cd2ddd947ceb60069bcd386b1ae_JaffaCakes118
Files
-
381d5cd2ddd947ceb60069bcd386b1ae_JaffaCakes118.exe windows:5 windows x86 arch:x86
090223e54ea89ddd9897bb14bfbe89e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetCurrentDirectoryA
GetModuleHandleA
GlobalLock
CompareStringW
FreeEnvironmentStringsA
IsValidCodePage
GetVersion
SetFileTime
GetSystemInfo
GetCurrentProcessId
VirtualProtect
lstrcpyA
GetStartupInfoA
msvcrt
_isctype
__p__commode
memset
localtime
__setusermatherr
_getch
strtoul
wcsrchr
_except_handler3
_controlfp
wcstombs
exit
_initterm
_acmdln
__initenv
isxdigit
__p__fmode
log10
sprintf
_XcptFilter
_adjust_fdiv
fputs
__getmainargs
__set_app_type
ole32
OleRun
CoInitialize
OleSetClipboard
OleInitialize
OleFlushClipboard
IsAccelerator
StringFromGUID2
IsEqualGUID
CoTaskMemRealloc
CoRevokeClassObject
oleaut32
SafeArrayUnaccessData
SafeArrayGetUBound
SetErrorInfo
SysAllocStringLen
GetErrorInfo
SysStringLen
CreateErrorInfo
VariantClear
shell32
SHGetFolderPathW
Shell_NotifyIconA
ExtractIconW
SHGetDiskFreeSpaceExW
CommandLineToArgvW
ExtractIconExW
SHGetFileInfoA
SHBrowseForFolderA
user32
KillTimer
IsChild
EndPaint
SetCapture
RegisterWindowMessageA
DefWindowProcA
GetSystemMetrics
GetWindow
GetWindowRect
SetActiveWindow
advapi32
RegCreateKeyA
SetSecurityDescriptorOwner
QueryServiceStatus
InitializeAcl
RegOpenKeyA
CryptCreateHash
OpenProcessToken
CryptAcquireContextA
OpenServiceW
ControlService
OpenThreadToken
RegEnumKeyExW
RegDeleteKeyW
comctl32
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_AddMasked
ImageList_SetDragCursorImage
ImageList_GetImageCount
ImageList_GetBkColor
ImageList_SetIconSize
ImageList_Remove
version
VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
gdi32
CreateEllipticRgn
CreateDCA
SetRectRgn
SelectPalette
CreateICW
ExtTextOutA
TextOutA
CopyEnhMetaFileA
GetEnhMetaFileDescriptionA
FillRgn
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ