Static task
static1
Behavioral task
behavioral1
Sample
75bae14f2a642387c36466f42e3e1ed2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
75bae14f2a642387c36466f42e3e1ed2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75bae14f2a642387c36466f42e3e1ed2_JaffaCakes118
-
Size
162KB
-
MD5
75bae14f2a642387c36466f42e3e1ed2
-
SHA1
e51bd8a99d3be6ac150ce2d1cea6c35b61dcc5ad
-
SHA256
ab7f536b3073948103fc979de0e1d5b81f5443bc2417ebce8a353277ea2b3f7d
-
SHA512
cdd9abb238f64f611009fe8b6db75fe8e630cf30b4f7186926031c0d2893ffad8d4f7e1db4e0113721be2dd39dba596411dc695125e639f5c16ffd12b7529fb2
-
SSDEEP
3072:fjaegg3lu6owdt7+Zog0UIH00IK4cX5Qa1QtRjcfD6jJ+W9rEXKzede:feYlSwqZog0UIHbUzttdOD6jJ+UrEa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75bae14f2a642387c36466f42e3e1ed2_JaffaCakes118
Files
-
75bae14f2a642387c36466f42e3e1ed2_JaffaCakes118.exe windows:4 windows x86 arch:x86
bbeabda2c6b3cae5891f0427889bdf94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetInputState
PostThreadMessageA
GetMessageA
wsprintfA
advapi32
GetAclInformation
GetUserNameA
SetFileSecurityA
GetSecurityDescriptorControl
SetSecurityDescriptorDacl
EqualSid
GetAce
AddAce
InitializeAcl
GetLengthSid
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetFileSecurityA
LookupAccountNameA
kernel32
GetStringTypeW
FlushFileBuffers
CloseHandle
SetLastError
GetStringTypeA
LCMapStringW
LCMapStringA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetProcessHeap
GetLastError
ExitProcess
GetSystemDirectoryA
DeleteFileA
SetFileAttributesA
MoveFileA
FreeResource
WriteFile
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
GetTickCount
GetTempPathA
lstrcmpiA
GetFileAttributesA
ReadFile
SetFilePointer
GetModuleFileNameA
ReleaseMutex
CreateMutexA
GetCommandLineA
RtlUnwind
HeapReAlloc
HeapAlloc
RaiseException
GetStartupInfoA
GetVersion
HeapFree
VirtualFree
VirtualAlloc
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
MultiByteToWideChar
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ