Static task
static1
Behavioral task
behavioral1
Sample
61e16f192d35eeddc7b3ccb8900240fb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
61e16f192d35eeddc7b3ccb8900240fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
61e16f192d35eeddc7b3ccb8900240fb_JaffaCakes118
-
Size
142KB
-
MD5
61e16f192d35eeddc7b3ccb8900240fb
-
SHA1
2b4118da690f3dc9f4910452b6304950b8e8385e
-
SHA256
3b4db134bd064aacd72d8da30314b0c4f331e7487f15b4879fcfa4fa76203b88
-
SHA512
3abb73b457cf7503b2e192181c995df06d23aa6155cfd2cfba03985033bffc4cf64ea4f9f0aada283e8e6febd71e9f8560750bf1366c469c4a9873e634ecc735
-
SSDEEP
3072:O0war23frSspgVy5WjzBq/D35qJVZT11cxI3v:Ohz7pgVxUqJzT1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61e16f192d35eeddc7b3ccb8900240fb_JaffaCakes118
Files
-
61e16f192d35eeddc7b3ccb8900240fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
5490b04fed8fd6bcdfcba97650ff66d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
GetConsoleOutputCP
IsBadCodePtr
VirtualProtect
GetModuleHandleA
msvcrt
_cexit
log
_acmdln
__setusermatherr
_initterm
__getmainargs
_except_handler3
_adjust_fdiv
__p__commode
__p__fmode
exit
__set_app_type
isspace
fputs
_XcptFilter
user32
DestroyCursor
CreateWindowExA
GetCursorPos
PostQuitMessage
GetFocus
GetClientRect
LoadIconA
EndDialog
SetScrollPos
OemToCharA
SetMenu
DialogBoxParamA
UnregisterClassA
gdi32
SetWinMetaFileBits
GetSystemPaletteEntries
SetViewportOrgEx
GetEnhMetaFilePaletteEntries
Chord
CreateHalftonePalette
advapi32
CopySid
AddAccessAllowedAce
DeleteService
GetUserNameA
OpenServiceA
OpenServiceW
LookupPrivilegeValueW
RegQueryValueA
RegOpenKeyW
IsValidSid
RegQueryValueExW
oleaut32
SafeArrayCreate
SafeArrayPtrOfIndex
CreateErrorInfo
SysFreeString
SysAllocStringLen
SysStringByteLen
comctl32
ImageList_Add
ImageList_LoadImageW
ImageList_GetImageInfo
CreateStatusWindowA
InitCommonControlsEx
ImageList_SetIconSize
ImageList_DrawEx
CreatePropertySheetPageA
ole32
CoInitializeSecurity
OleSetMenuDescriptor
GetRunningObjectTable
OleRun
CoTaskMemAlloc
CoGetMalloc
CoRegisterMessageFilter
DoDragDrop
CoTaskMemFree
CoCreateInstance
CreateILockBytesOnHGlobal
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerLanguageNameA
shell32
SHGetFileInfoA
SHGetMalloc
SHChangeNotify
DragAcceptFiles
DoEnvironmentSubstW
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ