Static task
static1
Behavioral task
behavioral1
Sample
7633c9481a68eeacb21dc0ca8a8a7bc9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7633c9481a68eeacb21dc0ca8a8a7bc9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7633c9481a68eeacb21dc0ca8a8a7bc9_JaffaCakes118
-
Size
122KB
-
MD5
7633c9481a68eeacb21dc0ca8a8a7bc9
-
SHA1
556a03032e407396922f6939be3e3c518432f40d
-
SHA256
ff9778a2726c271d9e1d157af86cb42cd11ba49719c8536023fd8e95854cea48
-
SHA512
7811a6e1818f157db6bc0ee86a5b6211456204efc07007aa456f5193b8b4af4391140382d15fcb0f079e80b5e6eb8e102ebdc3839b3eab8d7884d22528101880
-
SSDEEP
3072:UZicBoTiua5oYh7Gat57gVKKLSCR8rfCl4YlgO4YkC9U:yD5og8VKKLSCgalRlv4YkJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7633c9481a68eeacb21dc0ca8a8a7bc9_JaffaCakes118
Files
-
7633c9481a68eeacb21dc0ca8a8a7bc9_JaffaCakes118.exe windows:5 windows x86 arch:x86
3bcfaee780ce6582c3491e611ff4e5bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStartupInfoA
GetTickCount
DeleteFileW
lstrcmpA
LocalFree
DeviceIoControl
GetConsoleOutputCP
GetUserDefaultLCID
GetModuleHandleA
lstrcmpiW
GetFileTime
VirtualProtect
GetFileType
GetOEMCP
msvcrt
_initterm
_CIpow
_umask
_acmdln
_fullpath
__set_app_type
ctime
_setjmp
_XcptFilter
_setjmp3
_except_handler3
localtime
__setusermatherr
__dllonexit
_stricmp
strcmp
__p__commode
_controlfp
__p__fmode
log10
_adjust_fdiv
__p___initenv
exit
__getmainargs
__CxxFrameHandler
gdi32
SelectObject
PlayEnhMetaFile
TextOutA
DeleteEnhMetaFile
OffsetWindowOrgEx
FillRgn
ScaleWindowExtEx
GetTextFaceA
RectInRegion
GetDIBits
shell32
DragQueryFileA
SHGetSettings
SHGetPathFromIDListW
SHGetFileInfo
SHGetSpecialFolderLocation
ExtractIconW
SHGetFileInfoA
SHBrowseForFolderW
DragAcceptFiles
SHCreateDirectoryExW
ShellExecuteExA
comctl32
CreateStatusWindowA
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_GetImageCount
ImageList_SetIconSize
ImageList_DragShowNolock
ImageList_GetIcon
oleaut32
SysReAllocStringLen
LoadTypeLib
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayPtrOfIndex
version
VerFindFileW
VerInstallFileA
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerLanguageNameA
advapi32
InitiateSystemShutdownA
RegEnumKeyA
QueryServiceStatus
RegOpenKeyA
CopySid
RegCloseKey
RegDeleteValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegEnumKeyExW
CryptHashData
RegDeleteKeyW
user32
DrawIconEx
DialogBoxParamA
ReleaseDC
TrackPopupMenu
ShowWindow
GetScrollInfo
SetScrollRange
InvalidateRect
WindowFromPoint
GetDlgItem
ole32
CoUninitialize
CoSetProxyBlanket
OleDraw
StringFromGUID2
OleGetClipboard
StringFromCLSID
CoGetInterfaceAndReleaseStream
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ