Static task
static1
Behavioral task
behavioral1
Sample
46a253c1d7f805b77bcaf94e52a59f24_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46a253c1d7f805b77bcaf94e52a59f24_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46a253c1d7f805b77bcaf94e52a59f24_JaffaCakes118
-
Size
238KB
-
MD5
46a253c1d7f805b77bcaf94e52a59f24
-
SHA1
9708aabff53ba0d7d78be76c6f1a7527b0a295b2
-
SHA256
04b3d78ef652640bdf3a7220173ecd21d8d64536fb038f75ecaf52278d3f7895
-
SHA512
62b586a33c8f8c27c07f07a7207feb5d72b5ce23c979ffef75b6fbce5a601cc71d91df932ad44eac23297834390487ef7f337f24f448afcb7dfded305d860438
-
SSDEEP
6144:qZs6w3JoZvJPPcVSd6E3acD9t+9sSWzmNyMDzFUl:qO6ccHcSVVIsSWzmNy2Fy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46a253c1d7f805b77bcaf94e52a59f24_JaffaCakes118
Files
-
46a253c1d7f805b77bcaf94e52a59f24_JaffaCakes118.exe windows:4 windows x86 arch:x86
91c417b35cb6aa599978e096ab2f859a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
LoadIconA
GetAsyncKeyState
GetWindowRect
KillTimer
UpdateWindow
PeekMessageA
GetCursorPos
MoveWindow
SystemParametersInfoA
PostQuitMessage
RegisterWindowMessageA
SetFocus
EnableWindow
SetWindowLongA
GetSystemMetrics
WaitMessage
GetWindowLongA
GetClientRect
SetCursor
GetClassNameA
GetMessageA
LoadCursorA
GetParent
ShowWindow
MessageBeep
DestroyIcon
LoadAcceleratorsA
GetMessageW
PostThreadMessageA
GetActiveWindow
IsWindow
TranslateMessage
SetTimer
GetWindowPlacement
MessageBoxA
SendMessageA
OffsetRect
EndPaint
IsIconic
MessageBoxW
FillRect
DestroyWindow
CharNextA
DispatchMessageA
EnumWindowStationsA
BeginPaint
SetWindowPos
SetRect
TranslateAcceleratorA
GetFocus
wintrust
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
advapi32
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegQueryValueExW
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExW
RegQueryInfoKeyA
ole32
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemFree
OleFlushClipboard
OleSetClipboard
CoRegisterMessageFilter
CoCreateInstance
RevokeDragDrop
OleUninitialize
CoTaskMemRealloc
StringFromGUID2
RegisterDragDrop
CoTaskMemAlloc
OleGetClipboard
msvcrt
_acmdln
__set_app_type
_amsg_exit
_cexit
wcscmp
_CxxThrowException
_vsnwprintf
_initterm
__p__commode
__dllonexit
memset
malloc
exit
_c_exit
swscanf
_exit
__p__fmode
__CxxFrameHandler
_ismbblead
_wtoi
_adjust_fdiv
_controlfp
free
_wcsnicmp
_mbsrchr
_XcptFilter
__setusermatherr
wcslen
??1type_info@@UAE@XZ
realloc
_onexit
__getmainargs
_except_handler3
kernel32
InterlockedIncrement
LoadLibraryW
Sleep
GetProcAddress
GetModuleFileNameA
SetEvent
GetSystemTimeAsFileTime
GetCurrentProcessId
GetConsoleOutputCP
GetSystemDirectoryW
GetModuleFileNameW
FindResourceA
TerminateProcess
GetCommandLineW
VirtualAlloc
SetLastError
WideCharToMultiByte
GetVersion
GetTickCount
LoadResource
FreeLibrary
GetFileSize
InterlockedDecrement
SizeofResource
lstrcpynA
GetACP
CreateEventA
LoadLibraryExA
GetCurrentProcess
lstrlenW
GetLocaleInfoA
GetCurrentThreadId
SetUnhandledExceptionFilter
ExitProcess
QueryPerformanceCounter
MultiByteToWideChar
CreateThread
LocalFree
LocalAlloc
RaiseException
DeleteCriticalSection
LoadLibraryA
GetFileAttributesW
lstrlenA
GetLastError
lstrcmpiA
ExitProcess
CloseHandle
GetThreadLocale
InterlockedExchange
AddAtomA
GetModuleHandleW
InitializeCriticalSection
SetErrorMode
VirtualProtect
IsDBCSLeadByte
GetModuleHandleA
UnhandledExceptionFilter
WaitForSingleObject
OutputDebugStringA
GetVersionExA
FormatMessageA
LoadLibraryExW
GetStartupInfoA
crypt32
CryptHashPublicKeyInfo
Sections
.text Size: 123KB - Virtual size: 123KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ