Static task
static1
Behavioral task
behavioral1
Sample
38be8dc328d41922f6360a597fd25f05_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
38be8dc328d41922f6360a597fd25f05_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38be8dc328d41922f6360a597fd25f05_JaffaCakes118
-
Size
331KB
-
MD5
38be8dc328d41922f6360a597fd25f05
-
SHA1
a71a0f7ad878c647f2e1b5b22fdcc3cb97db531d
-
SHA256
c40ae819943045f286f8c419e2b497597636ffc2ecab581a32943590bfc52794
-
SHA512
10b343728bb433ea7e3314855b9edcbc2117b0d55768382c86a799d67ccc64d5cf12ab33ae21b17318c904a730e8b1a40526fc0b2daa112fd751b33d8242d7e4
-
SSDEEP
6144:mxtro2yXoAfIKiJfC/nBfZZ3lxxfGqct6+UNIsE2L:edo20oAAKiJfCpVxxfGt6+IIsE+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38be8dc328d41922f6360a597fd25f05_JaffaCakes118
Files
-
38be8dc328d41922f6360a597fd25f05_JaffaCakes118.exe windows:4 windows x86 arch:x86
c7a49dd1e304319e708764302c53486b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetSysColors
ChildWindowFromPointEx
EnumThreadWindows
SendDlgItemMessageA
OpenIcon
CreateDialogIndirectParamA
AdjustWindowRectEx
SetWindowPos
FindWindowA
GetWindowPlacement
ole32
CreateClassMoniker
OleGetAutoConvert
CoTaskMemFree
OleSetAutoConvert
CoGetPSClsid
CLSIDFromString
MkParseDisplayName
CoAddRefServerProcess
CoRegisterClassObject
StgOpenPropStg
OleQueryLinkFromData
OleCreateStaticFromData
OleGetClipboard
kernel32
VirtualLock
GetModuleHandleA
VirtualAlloc
ReleaseSemaphore
CreateSemaphoreA
OpenSemaphoreA
GetProcAddress
VirtualUnlock
GetOverlappedResult
GlobalSize
GlobalAlloc
GetACP
GetStartupInfoA
GetOEMCP
GetTimeFormatA
LocalUnlock
HeapCreate
IsValidCodePage
msvcrt
__getmainargs
exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
_XcptFilter
_exit
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ