Static task
static1
Behavioral task
behavioral1
Sample
45cc7845a764f0edee22add2ef93d879_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
45cc7845a764f0edee22add2ef93d879_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
45cc7845a764f0edee22add2ef93d879_JaffaCakes118
-
Size
270KB
-
MD5
45cc7845a764f0edee22add2ef93d879
-
SHA1
4148ca28db7a13e079bbc0589080f273f1ae5eef
-
SHA256
11be8f2fdeb147bf52fbdb6b950a46ad25898438a28d47f2efe343333c0a24bc
-
SHA512
46ff12dadbed23e4ae814c488facde60a558d3ad45ab894df5ae0b62587634cf95cc27ef07ce720f486362052774dddea060790006f468adb8d84d66d1a897a4
-
SSDEEP
6144:a0eKJ1WuqXruCDjy+sM/987oyE8pPKqPGg:7jS5nyPW91yEa2g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45cc7845a764f0edee22add2ef93d879_JaffaCakes118
Files
-
45cc7845a764f0edee22add2ef93d879_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d56aaf1766d198dd5081429ee5186a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
StringFromGUID2
oleaut32
SysStringLen
SysAllocString
SysStringByteLen
VariantInit
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VarBstrCat
SysFreeString
psapi
GetModuleBaseNameW
kernel32
CreateIoCompletionPort
DeleteCriticalSection
WideCharToMultiByte
OpenProcess
WTSGetActiveConsoleSessionId
LoadResource
SetUnhandledExceptionFilter
GlobalFree
lstrlenW
CloseHandle
GetSystemTime
GetSystemTimeAsFileTime
UnhandledExceptionFilter
LockResource
GetComputerNameExW
LoadLibraryExW
HeapReAlloc
FindResourceW
WaitForSingleObject
ExpandEnvironmentStringsW
GetQueuedCompletionStatus
LocalFree
WaitForMultipleObjects
FileTimeToSystemTime
HeapFree
EnterCriticalSection
FreeLibrary
CreateProcessW
CompareFileTime
HeapAlloc
FindResourceExW
GetCurrentThreadId
lstrlenA
HeapSize
LeaveCriticalSection
LocalAlloc
IsDebuggerPresent
PostQueuedCompletionStatus
CreateFileW
GetProcessHeap
RaiseException
SystemTimeToFileTime
SizeofResource
HeapDestroy
FormatMessageW
TlsAlloc
VirtualAlloc
user32
GetSystemMetrics
EnumWindows
GetDesktopWindow
PostMessageW
GetWindowThreadProcessId
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
atl
AtlModuleInit
AtlAxGetControl
AtlPixelToHiMetric
AtlAxCreateControlEx
AtlModuleGetClassObject
AtlModuleRevokeClassObjects
AtlGetVersion
deskadp
DllGetClassObject
Sections
.TVntRgX Size: 2KB - Virtual size: 19KB
IMAGE_SCN_MEM_READ
.qrErgwX Size: 1KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
.TNMizh Size: 1KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
.zwgvgW Size: 3KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zUIYxH Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DZQg Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.GhIp Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fGNNSBj Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YsCsr Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.JgZX Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ZPHpLz Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Icxm Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ