Static task
static1
Behavioral task
behavioral1
Sample
46b1edd344bd1faeec1ec7f2038bf747_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
46b1edd344bd1faeec1ec7f2038bf747_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
46b1edd344bd1faeec1ec7f2038bf747_JaffaCakes118
-
Size
936KB
-
MD5
46b1edd344bd1faeec1ec7f2038bf747
-
SHA1
7ef2931206bfc935c17013d061825897f49833e9
-
SHA256
d3e723274aed58dcbb794a953279a50e015c556e57104aaed109b681b0ed3c62
-
SHA512
c95812cb90bf4c02a30b66e8634d41f7d0364ec72ba45bf2965ff76f5b748e39616b69c68f8172589e86d0ec4a49b76fdd741d8daa113077b2704f8df3f6cddf
-
SSDEEP
24576:u5Rl59oMEWGvaLOkRHZ/be8/VCw4YqVes33QZlTh:u5Rl59o9W6kvK8qYyes33QZBh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46b1edd344bd1faeec1ec7f2038bf747_JaffaCakes118
Files
-
46b1edd344bd1faeec1ec7f2038bf747_JaffaCakes118.exe windows:4 windows x86 arch:x86
6095167a2e8617aa7c026558391c6032
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryW
WriteConsoleOutputW
FreeResource
FreeLibrary
GetTimeZoneInformation
GetConsoleCursorInfo
ReadConsoleInputW
ExitProcess
user32
DefMDIChildProcA
CharUpperBuffA
GetMenuItemInfoW
SetClipboardViewer
SetSysColors
InternalGetWindowText
PostMessageW
comdlg32
GetSaveFileNameW
ChooseColorA
FindTextW
advapi32
AccessCheck
InitiateSystemShutdownA
SetKernelObjectSecurity
RegSaveKeyW
RegUnLoadKeyW
RegFlushKey
SetSecurityDescriptorDacl
RegCreateKeyA
InitializeSecurityDescriptor
shell32
DragAcceptFiles
FindExecutableW
ExtractIconA
ole32
OleRegGetMiscStatus
CoReleaseServerProcess
IIDFromString
StgCreateStorageEx
OleCreateMenuDescriptor
GetRunningObjectTable
CreateStreamOnHGlobal
comctl32
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_GetBkColor
shlwapi
StrCpyW
StrDupW
StrCmpNA
PathIsUNCA
SHAutoComplete
StrCatW
SHRegQueryUSValueW
Sections
.text Size: 2KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 627KB - Virtual size: 627KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ