Static task
static1
Behavioral task
behavioral1
Sample
398325a9ceafd8fcf59b484ccf32d616_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
398325a9ceafd8fcf59b484ccf32d616_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
398325a9ceafd8fcf59b484ccf32d616_JaffaCakes118
-
Size
292KB
-
MD5
398325a9ceafd8fcf59b484ccf32d616
-
SHA1
61e8f7f934462e8c20b59111b3f4be1d4f871573
-
SHA256
9325df86340cc20d4f3c7d17b5f98cb2083cfc649113cd8d18b566c796a31ac5
-
SHA512
4e16018a7c40d9f4c1b40170b00b992d21d9dae965bb8f3bde3d8469dae6bb4e49761cedcdc7289c9723becc7e185a865a265d8f01647435ca82487dadbc3ee4
-
SSDEEP
6144:QHejukEEp72riPJMec1jzNi1ZCDlbgaQ4qV09vs6pxpahhtiJI511CDYB:Q7Py7gWYdzN8ZCDlsaQ4qVWTp/bCCDYB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 398325a9ceafd8fcf59b484ccf32d616_JaffaCakes118
Files
-
398325a9ceafd8fcf59b484ccf32d616_JaffaCakes118.exe windows:4 windows x86 arch:x86
04bd53bbc8825703023ef80b9b00dd30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TileWindows
IsWindowUnicode
GetClipboardData
SetClipboardData
GetSysColor
GetWindowTextLengthA
GetLastActivePopup
GetWindow
GetDlgItem
GetDialogBaseUnits
MessageBoxExA
GetDlgItemTextA
ole32
OleInitialize
GetRunningObjectTable
CoFileTimeNow
CoFreeUnusedLibraries
OleLoadFromStream
CoInstall
ReadFmtUserTypeStg
GetHGlobalFromILockBytes
GetHGlobalFromStream
CoGetClassObject
MonikerRelativePathTo
OleCreateLinkToFile
StringFromGUID2
CreateClassMoniker
OleCreateMenuDescriptor
OleSave
OleCreateLinkToFileEx
gdi32
GetStockObject
kernel32
GetCommandLineA
ResumeThread
VirtualAlloc
GetLastError
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
FreeEnvironmentStringsA
GlobalLock
GetProcAddress
IsValidLocale
DeleteCriticalSection
VirtualAllocEx
OpenEventA
LCMapStringA
GetCurrencyFormatA
VirtualLock
GetModuleHandleA
GlobalHandle
GlobalAlloc
GetOverlappedResult
InitializeCriticalSection
ReleaseMutex
IsBadReadPtr
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 277KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ