Static task
static1
Behavioral task
behavioral1
Sample
6a29409b89e7382ca9077b5f4416c293_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a29409b89e7382ca9077b5f4416c293_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a29409b89e7382ca9077b5f4416c293_JaffaCakes118
-
Size
154KB
-
MD5
6a29409b89e7382ca9077b5f4416c293
-
SHA1
ab8e903cb6a7ce1bbccf072ffe98dd330f39a32a
-
SHA256
cc1ec7ad0c63a58e588544808b42d273b6054feafbdbeda89789247ca0ed7ed4
-
SHA512
1a19c3f1f1a00a74fe8446fe6ae4f362e232d93087306b9136281e2d055add59f76ce6b7bcd1aa33b143bc8f5cc3b5bb6cac090e27ef992aa17b045fd867d2e5
-
SSDEEP
3072:zuspBEfoENUreyIs9A1eYZCc37cYq8zkWU6VRNxp9dwInb78BCdIvZz1++2D/:z7Y+9A1dZXZU6VXxpPdnb7tIvV1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a29409b89e7382ca9077b5f4416c293_JaffaCakes118
Files
-
6a29409b89e7382ca9077b5f4416c293_JaffaCakes118.exe windows:4 windows x86 arch:x86
ccc61f732097a2bda548a76e61acf606
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateDialogParamA
GetForegroundWindow
GetSysColor
ChildWindowFromPointEx
DestroyWindow
ole32
CoGetTreatAsClass
CoGetCurrentProcess
oleaut32
RevokeActiveObject
kernel32
TlsSetValue
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
GetProcessHeap
ReleaseSemaphore
VirtualUnlock
IsBadStringPtrA
GetModuleHandleA
GetProcAddress
ExitProcess
GetLastError
SetEnvironmentVariableW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetStartupInfoA
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ngjyg Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yinxnw Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ