Static task
static1
Behavioral task
behavioral1
Sample
72c29cfe47e98323d05a740a30f4b856_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
72c29cfe47e98323d05a740a30f4b856_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72c29cfe47e98323d05a740a30f4b856_JaffaCakes118
-
Size
248KB
-
MD5
72c29cfe47e98323d05a740a30f4b856
-
SHA1
9ae7a0ad0d38d94a18035b2cd56d2f56bc37a76f
-
SHA256
4ad2a33df189df90458d2d01ca050cd5b4446acf47812e64f3821da904486e4b
-
SHA512
dcd2df642edab9ee5b3f4ff5935bce2410a8946c8a29045a9ce7cdef9e9952895f60b07319328284d0b467005e2e1203d8130cdf35797289e3a7f7e6e7bec34f
-
SSDEEP
6144:wkhmyvqtecdHjnV16j4+xpusmNH0rthiWDkSY:wkMyvq0cBp5MiWw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72c29cfe47e98323d05a740a30f4b856_JaffaCakes118
Files
-
72c29cfe47e98323d05a740a30f4b856_JaffaCakes118.exe windows:4 windows x86 arch:x86
6c5d0480f0d63d2a411dd727d66b92c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
DispatchMessageW
GetSysColorBrush
MessageBeep
GetNextDlgGroupItem
CreateWindowExW
InvalidateRgn
PostMessageW
UpdateWindow
SetTimer
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
PostQuitMessage
SetWindowPos
MapDialogRect
GetParent
SetWindowContextHelpId
GetWindow
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
GetWindowLongW
kernel32
GetCurrentDirectoryA
GetSystemInfo
ReleaseMutex
CreateFileA
CreateMutexW
ResetEvent
SetEvent
CreateEventW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
ExitProcess
SetFilePointer
oleaut32
DispGetIDsOfNames
OleLoadPicture
QueryPathOfRegTypeLib
GetErrorInfo
SetErrorInfo
VariantClear
OleLoadPictureEx
advapi32
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
shlwapi
PathFindExtensionA
Sections
.text Size: 143KB - Virtual size: 206KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ