Static task
static1
Behavioral task
behavioral1
Sample
83238acc0a48419524072e36e771be6c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83238acc0a48419524072e36e771be6c_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
83238acc0a48419524072e36e771be6c_JaffaCakes118
-
Size
153KB
-
MD5
83238acc0a48419524072e36e771be6c
-
SHA1
5958a940abca6bde446775ae3e3cf85efd4a1710
-
SHA256
367fcb2fb86acdbc40c2fcc31b526fa52f1cdf4f529487919c950cab19f13cca
-
SHA512
354ec134171b48385e240dd3a8f371678fd93d711b7ddfef2cb11a3b2d8a2bb0c2da310fcb0a85c0bfd4eaadceab11109a4b787395b1fbbb30951b4a907496eb
-
SSDEEP
3072:96DKBKJOKYuzDZIIaeCSLWWzbgB+4e/01Lk5V77:9azDRWWzQe/01I5V77
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83238acc0a48419524072e36e771be6c_JaffaCakes118
Files
-
83238acc0a48419524072e36e771be6c_JaffaCakes118.exe windows:4 windows x86 arch:x86
a17371448f3cc400f6705b8e52750492
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsDBCSLeadByte
SetFileAttributesA
lstrlenA
GetLocaleInfoA
GetModuleHandleA
ExitProcess
VirtualProtect
GetACP
GetWindowsDirectoryA
GetStartupInfoA
WaitForSingleObject
CompareStringW
lstrcmpiA
user32
GetSysColor
CallNextHookEx
OpenClipboard
GetDC
IsWindowEnabled
IsWindowVisible
msvcrt
log10
_XcptFilter
__p__fmode
_filelengthi64
_mbsrchr
strtoul
_adjust_fdiv
__getmainargs
_except_handler3
__setusermatherr
__initenv
calloc
perror
__lc_codepage
_snprintf
exit
__set_app_type
_read
_initterm
_beginthreadex
longjmp
strcspn
__p__commode
_wtol
fclose
_acmdln
advapi32
RegQueryValueExW
RegEnumKeyExW
ControlService
comctl32
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_Remove
ImageList_Write
ImageList_Destroy
ImageList_Replace
ImageList_Draw
ole32
CoRegisterMessageFilter
CoTaskMemRealloc
CoSetProxyBlanket
StringFromIID
CoTaskMemAlloc
CreateBindCtx
CoReleaseMarshalData
PropVariantClear
oleaut32
SetErrorInfo
CreateErrorInfo
LoadTypeLib
SafeArrayGetElement
GetErrorInfo
shell32
SHGetFolderLocation
SHGetFolderPathW
SHGetSpecialFolderPathW
DoEnvironmentSubstW
DragQueryFileW
SHBrowseForFolder
SHCreateDirectoryExA
ExtractIconExA
ExtractIconW
SHGetPathFromIDListA
SHGetMalloc
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE