Static task
static1
Behavioral task
behavioral1
Sample
7205d7af5aca98f271b5a17ba2e3af88_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7205d7af5aca98f271b5a17ba2e3af88_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7205d7af5aca98f271b5a17ba2e3af88_JaffaCakes118
-
Size
163KB
-
MD5
7205d7af5aca98f271b5a17ba2e3af88
-
SHA1
c41d84af15cbdaf237e68190e506e7b6388c362e
-
SHA256
7a64fa4f33e3923acf8327219c6fc7d30fa1c55f46fe0a301a1fadc71dc24d5a
-
SHA512
b6650425bb4dc6b9e1df37d499ec11f6a17e18b21a6bb1795104cf2cd016082696b4d3c98a3cc7fbe94ea779f01b2b425ed80df71203b73a70446a2f986667d4
-
SSDEEP
3072:9ftAsaSPm0tQo5ph568ePrcC+zE/M6nz0gGG8iwRZCLF/ecs:7Asa+QMN68eSEEuN8JU5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7205d7af5aca98f271b5a17ba2e3af88_JaffaCakes118
Files
-
7205d7af5aca98f271b5a17ba2e3af88_JaffaCakes118.exe windows:4 windows x86 arch:x86
f61f6f6fa6c6516f3c07138e74baadd1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shlwapi
PathAppendW
PathRemoveFileSpecW
SHGetValueW
PathCombineW
PathFileExistsW
comctl32
PropertySheetW
oleacc
LresultFromObject
CreateStdAccessibleObject
user32
ReleaseDC
IsDlgButtonChecked
IsWindowEnabled
DestroyWindow
GetFocus
LoadIconW
PostQuitMessage
GetDlgCtrlID
PostMessageW
SetWindowTextW
SetWindowLongW
GetDC
IsWindow
CreateCursor
MsgWaitForMultipleObjects
shell32
ShellExecuteW
CommandLineToArgvW
SHFileOperationW
SHGetFolderPathW
ShellExecuteExW
ole32
CoInitializeEx
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CreateStreamOnHGlobal
CoInitialize
kernel32
FillConsoleOutputAttribute
MoveFileW
GetProcessPriorityBoost
GetFullPathNameW
EnumResourceNamesW
FreeEnvironmentStringsW
CompareFileTime
SearchPathW
GetShortPathNameW
SetFileTime
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ