Static task
static1
Behavioral task
behavioral1
Sample
81dfc8fbde1f2573827ebb684cff1004_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
81dfc8fbde1f2573827ebb684cff1004_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
81dfc8fbde1f2573827ebb684cff1004_JaffaCakes118
-
Size
149KB
-
MD5
81dfc8fbde1f2573827ebb684cff1004
-
SHA1
b583cca9ffa42a0411d3f9df101012ce65a5f1dd
-
SHA256
1e15a28e969634142cacfb4dd53f3fc57aa51ef8aaf8917db55c3ee4a38ff9a5
-
SHA512
019802ed98d1a8fabcfd5861effac352ce3e956cd5c19e97905a8b5c645b053bf8075a65f30b31cd95c52cf33ed2f388e76e5f5518801528ba9f691e87ecfb6a
-
SSDEEP
3072:iYlEGQKob/ZIKhL5EwfsQftvazcsdqeVQZQjK3Ew0fc7a8:iYMKobRIgEyCzzWCaEw0f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81dfc8fbde1f2573827ebb684cff1004_JaffaCakes118
Files
-
81dfc8fbde1f2573827ebb684cff1004_JaffaCakes118.exe windows:5 windows x86 arch:x86
fc3e585f18046f9e18ee62dd41e7b2b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_adjust_fdiv
_initterm
log10
__p__commode
_XcptFilter
__set_app_type
_strdup
_putenv
_ftol
_mbsicmp
__setusermatherr
__p__fmode
_vsnwprintf
fgetpos
__getmainargs
swprintf
_acmdln
realloc
exit
_except_handler3
_controlfp
kernel32
FileTimeToSystemTime
CreateDirectoryA
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetLastError
Sleep
RemoveDirectoryA
GetSystemDirectoryA
SetFileTime
GetStartupInfoA
GetModuleHandleA
OutputDebugStringA
GetSystemTime
GetVersion
VirtualProtect
version
GetFileVersionInfoSizeA
GetFileVersionInfoW
VerFindFileW
VerInstallFileW
VerQueryValueW
GetFileVersionInfoA
oleaut32
SafeArrayGetElement
SafeArrayRedim
SetErrorInfo
SafeArrayPutElement
SysStringLen
SysStringByteLen
SafeArrayGetUBound
SysFreeString
comctl32
ImageList_Replace
ImageList_EndDrag
ImageList_DragEnter
ImageList_LoadImageA
InitCommonControls
ImageList_GetBkColor
ImageList_SetOverlayImage
CreateStatusWindowA
ImageList_GetImageInfo
PropertySheetW
ImageList_BeginDrag
shell32
ShellExecuteW
SHBrowseForFolder
SHBrowseForFolderA
SHCreateDirectoryExA
DragQueryFileA
SHBrowseForFolderW
CommandLineToArgvW
ExtractIconExA
ShellExecuteEx
ole32
OleDraw
IIDFromString
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
CoTaskMemFree
CoRegisterClassObject
PropVariantClear
RevokeDragDrop
user32
SetTimer
SetCapture
ShowWindow
SetRect
GetScrollRange
UnregisterClassA
gdi32
EnumFontFamiliesExW
CreateEllipticRgn
CreateDIBPatternBrushPt
EnumFontFamiliesExA
GetDIBits
StrokePath
Pie
CreateRectRgn
EnumFontFamiliesA
CombineRgn
advapi32
OpenProcessToken
CryptDestroyHash
DeleteService
SetSecurityDescriptorOwner
RegQueryValueExW
SetSecurityDescriptorDacl
RegDeleteKeyA
GetSecurityDescriptorDacl
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 18KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE