Static task
static1
Behavioral task
behavioral1
Sample
46ad252c573190118b44448c9a6e29b5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46ad252c573190118b44448c9a6e29b5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46ad252c573190118b44448c9a6e29b5_JaffaCakes118
-
Size
336KB
-
MD5
46ad252c573190118b44448c9a6e29b5
-
SHA1
0a5754f4035da2a9c4217326dd16f34131b16596
-
SHA256
661cc98afa728fa90239953252e53484cb37490b06185d279e86371e886c154d
-
SHA512
6f37cf8e5c520c6f6a0004037ec430606754fcbe7cfb5b62fe1739824a16db2a0ce33fa600565b8e2645abf0556646c20e90610e4db5f193e867e9b8778c7e0d
-
SSDEEP
6144:xS4+5zMv2TXYFuFiq9aMhd0YSlPWiE4yos2jEWTKETxAn40PO7uiffyBO7:w46QGuC8KcXQWOEFA4wVifb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46ad252c573190118b44448c9a6e29b5_JaffaCakes118
Files
-
46ad252c573190118b44448c9a6e29b5_JaffaCakes118.exe windows:4 windows x86 arch:x86
523a0b23f492b8b2a1a776a13120f8a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumCalendarInfoW
FindResourceExA
EnumTimeFormatsW
FreeLibrary
FreeLibraryAndExitThread
FileTimeToLocalFileTime
RemoveDirectoryW
GetProfileStringA
VirtualUnlock
UnmapViewOfFile
WriteConsoleOutputCharacterA
PulseEvent
WritePrivateProfileStructA
GetFileAttributesExA
GetVolumeInformationW
WritePrivateProfileSectionA
InitializeCriticalSection
ExitThread
FillConsoleOutputCharacterA
WriteFile
EnumDateFormatsW
GetThreadContext
GetVersionExA
FlushConsoleInputBuffer
ExpandEnvironmentStringsW
GetTapeStatus
WriteConsoleOutputW
GetModuleHandleA
WritePrivateProfileStringA
GlobalUnlock
FormatMessageA
CreateProcessA
GlobalFree
CopyFileExW
_lopen
GetFullPathNameA
SetConsoleWindowInfo
GetSystemInfo
EnumSystemCodePagesA
VirtualQuery
IsBadStringPtrA
ReadFile
FindFirstFileW
GetDiskFreeSpaceW
GetCurrentDirectoryW
FindNextChangeNotification
ReleaseMutex
LocalAlloc
_hread
SetThreadAffinityMask
GetFileInformationByHandle
GetCommandLineA
VirtualProtect
RaiseException
ExitProcess
user32
GetQueueStatus
InsertMenuA
UnregisterClassA
SetParent
FindWindowExA
PostMessageW
GetDlgItemInt
IsCharUpperA
GetMenu
ChangeDisplaySettingsA
EnumDisplaySettingsA
GetLastActivePopup
GetMenuStringA
GetKeyNameTextA
SetCursorPos
DefWindowProcW
RegisterClassExW
CreateWindowStationW
CharPrevW
EnumDesktopsW
GetScrollPos
SetWindowPos
SwitchToThisWindow
OpenIcon
CascadeWindows
ValidateRgn
CharUpperBuffW
ValidateRect
GrayStringA
DefDlgProcW
EmptyClipboard
GetScrollRange
SetScrollInfo
GetSystemMetrics
CreateDialogIndirectParamA
SystemParametersInfoA
GetKeyNameTextW
IsDialogMessageA
RegisterDeviceNotificationA
SetClipboardViewer
TranslateMessage
EnumDisplaySettingsExW
ExitWindowsEx
LoadMenuA
SetClipboardData
GetKeyboardLayout
CheckMenuRadioItem
RedrawWindow
gdi32
ResizePalette
SetBkMode
GetTextExtentPointA
GetTextFaceW
comdlg32
FindTextA
PageSetupDlgA
ChooseFontA
advapi32
CryptSetHashParam
IsTextUnicode
DeleteService
CryptGetUserKey
ImpersonateLoggedOnUser
MapGenericMask
RegOpenKeyExA
SetSecurityDescriptorOwner
ReadEventLogW
SetEntriesInAclW
EnumDependentServicesA
LogonUserA
CryptSetKeyParam
GetServiceDisplayNameA
CryptCreateHash
EnumServicesStatusA
AddAccessDeniedAce
CreateServiceA
GetAce
LookupPrivilegeValueW
LookupAccountSidW
AllocateAndInitializeSid
shell32
SHLoadInProc
ShellExecuteA
SHAddToRecentDocs
ole32
ProgIDFromCLSID
CoFreeAllLibraries
CreateStreamOnHGlobal
OleGetIconOfClass
oleaut32
SafeArrayGetLBound
SysStringLen
QueryPathOfRegTypeLi
SafeArrayRedim
LoadTypeLibEx
comctl32
PropertySheetA
ImageList_LoadImageW
CreatePropertySheetPageW
shlwapi
UrlIsW
SHCopyKeyA
UrlApplySchemeW
StrFormatKBSizeW
UrlCombineW
SHRegGetBoolUSValueA
PathFindFileNameA
PathAppendW
ChrCmpIW
PathRemoveFileSpecA
SHRegCreateUSKeyW
Sections
.text Size: 296KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE