Static task
static1
Behavioral task
behavioral1
Sample
645a0f7514b37d1263157f87fedd9a9a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
645a0f7514b37d1263157f87fedd9a9a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
645a0f7514b37d1263157f87fedd9a9a_JaffaCakes118
-
Size
9.5MB
-
MD5
645a0f7514b37d1263157f87fedd9a9a
-
SHA1
25d8ddb509537f67b36195d1578ec0d67789fd0e
-
SHA256
e2ddcc9d5be5dc377ab1684a85b87eaed0a33f9426f252287abd525bde1cd07d
-
SHA512
d425f2d647331f7a3882415fca2eeb6419db895adc86b36ee28429b2336aa67737c056c1efc073d490d78e8c24a76ff482b7bb8b76fd74608d6db96c8e62aada
-
SSDEEP
196608:8/u+B1cccCBo2Pgcn6XOR8rXtDnHn1LG86QRB0VKrAFp05h+dR:8/u+BLcCBn6+irdDHnNR5ReVZD4gR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 645a0f7514b37d1263157f87fedd9a9a_JaffaCakes118
Files
-
645a0f7514b37d1263157f87fedd9a9a_JaffaCakes118.exe windows:5 windows x86 arch:x86
ffcbf43172867285c8b4108d599d5070
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
MessageBoxA
kernel32
lstrcmpiA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
mpr
WNetOpenEnumW
ole32
CreateILockBytesOnHGlobal
comctl32
InitializeFlatSB
wininet
InternetSetStatusCallback
shell32
ShellExecuteW
comdlg32
ReplaceTextW
winspool.drv
OpenPrinterW
wsock32
WSACleanup
oledlg
OleUIObjectPropertiesW
Sections
.text Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 606KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 64B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 5.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp2 Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ