Static task
static1
Behavioral task
behavioral1
Sample
84db139111680b90d53c55aea41580d8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
84db139111680b90d53c55aea41580d8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
84db139111680b90d53c55aea41580d8_JaffaCakes118
-
Size
40KB
-
MD5
84db139111680b90d53c55aea41580d8
-
SHA1
09e021cf3c6fdd992736cfa3ac8e92b47139b0fc
-
SHA256
16f82545114b6b34085291d141c03ffd5c83e1abdce62cff7f9427bc058036f5
-
SHA512
eaa446a10daade10cc2f2c73c2eb6d751f069e96146c04d85bc00157550914b858d0e00179afb28e3ea2ed76806ece5b9ce8f69d20d747adbd9e49d8e449d165
-
SSDEEP
384:YiY1v9LpvmlcAIorGvTVmSYS6x7r+qvEXy56ejyMewhWFVE/oZ0:YiY594SVmM64qveATnhWfIoG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84db139111680b90d53c55aea41580d8_JaffaCakes118
Files
-
84db139111680b90d53c55aea41580d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
5bd453025fdeefc264c5d96a0e5f49a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
keydll
?Stop@@YGXXZ
?Start@@YGHXZ
kernel32
SetFilePointer
GetLastError
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetCPInfo
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
CloseHandle
GetModuleFileNameA
GetStringTypeW
FlushFileBuffers
FreeEnvironmentStringsW
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
user32
GetDlgItem
SendMessageA
EndDialog
PostQuitMessage
GetDC
MessageBoxA
BeginPaint
EndPaint
DefWindowProcA
DestroyWindow
DialogBoxParamA
CreateWindowExA
FindWindowA
SetWindowPos
ShowWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
FillRect
DrawTextExA
InvalidateRect
UpdateWindow
SetTimer
gdi32
DeleteObject
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor
SetBkColor
SelectObject
CreateSolidBrush
CreateFontA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ