Static task
static1
Behavioral task
behavioral1
Sample
72cb721efb1a9189ade309cd9cd13166_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72cb721efb1a9189ade309cd9cd13166_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72cb721efb1a9189ade309cd9cd13166_JaffaCakes118
-
Size
5.8MB
-
MD5
72cb721efb1a9189ade309cd9cd13166
-
SHA1
851b7d1da42d5b6f980183d5146ddb4e68acb95c
-
SHA256
c0f6fb4ddfd9d12bfc631100233954676c1d903af1c9047a6f7c0e7d9705becc
-
SHA512
611846622bdf539039cb67f7d0854bbfc8e317595201700baf77465d09639ed580d17292925afcd5ef4ac7343a583e97d936ccc41ba6cb1125e2f0c81f75c9b6
-
SSDEEP
98304:9C+XEgCiy96/8kRXXRo5xoO6RbQqIn9rp6Vuo7MkOzwQcyGYVXaLD5DolCnC2xhY:dXbyJkNIxNuQqI9rp6VuEMFzwnaYDxnA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72cb721efb1a9189ade309cd9cd13166_JaffaCakes118
Files
-
72cb721efb1a9189ade309cd9cd13166_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d3be5e49b7ed5a4535d20743332dff3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleSetContainedObject
StgOpenStorage
kernel32
LoadLibraryExW
VirtualUnlock
DebugBreak
GetWindowsDirectoryA
WriteFile
AllocConsole
CopyFileExW
SetEnvironmentVariableW
GetVersion
PeekConsoleInputW
Beep
GetCurrentProcessId
FreeLibraryAndExitThread
SetTimeZoneInformation
GetCommState
LoadResource
ExpandEnvironmentStringsW
CreateIoCompletionPort
ExitThread
CreateMutexW
VirtualLock
GlobalFlags
AreFileApisANSI
MoveFileExA
lstrcatW
WritePrivateProfileStringA
SetNamedPipeHandleState
GetTapeParameters
FindResourceExW
GlobalReAlloc
FileTimeToLocalFileTime
SetupComm
FindFirstFileW
CreateDirectoryW
QueryDosDeviceW
IsBadWritePtr
VirtualAllocEx
LocalSize
FreeLibrary
GetSystemTimeAsFileTime
EnumCalendarInfoW
TryEnterCriticalSection
lstrcmpA
LocalLock
ExitProcess
GlobalGetAtomNameW
FindFirstFileA
advapi32
RegSaveKeyW
AccessCheckAndAuditAlarmA
SetNamedSecurityInfoW
MakeAbsoluteSD
QueryServiceStatus
user32
SendMessageCallbackW
LoadIconW
IsIconic
AdjustWindowRect
GetPropW
GetSysColor
CreateIconFromResource
UnionRect
LoadKeyboardLayoutW
CharLowerW
SetForegroundWindow
SendNotifyMessageW
ShowCursor
EnumWindows
GetKeyboardLayoutNameA
GetMessageA
UnregisterClassA
GetMenuStringA
PostMessageW
DrawTextW
MessageBoxExA
ToAscii
InflateRect
CreatePopupMenu
GetKeyNameTextW
ws2_32
WSAGetLastError
WSAIsBlocking
getprotobyname
WSASendDisconnect
closesocket
sendto
shutdown
Sections
.text Size: 11KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ