Static task
static1
Behavioral task
behavioral1
Sample
85d12275ac019b8209bddb1d7aa77bc7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
85d12275ac019b8209bddb1d7aa77bc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85d12275ac019b8209bddb1d7aa77bc7_JaffaCakes118
-
Size
188KB
-
MD5
85d12275ac019b8209bddb1d7aa77bc7
-
SHA1
c7cb4f55fea4827894ec02e2d9fd38154cad87b7
-
SHA256
1aee05e8428a18d9740b42c0ac6e2539e9d3898a28808074727e4db9c7587f4e
-
SHA512
bb5755ad103abe13b06ab62cdd283efd271ab1f25e5a20adaace9f90c5f36c20ca63a2f28bd8da724a21b259dfa27d923d30ae0ac1c43ec0f470234978201e1f
-
SSDEEP
3072:TL/hMMSMNlCqOLnJJDbkj6wxSF+J+eZIoyPF9LG38whI5ckOJ8FSPy5HkUZK+wOe:TzhMw73OT/DHjMJzIoyP7LG3xk08sSbU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85d12275ac019b8209bddb1d7aa77bc7_JaffaCakes118
Files
-
85d12275ac019b8209bddb1d7aa77bc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
8d2cc28e41eea41c43313b6109a1882c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
kernel32
SetTapeParameters
Sleep
ClearCommError
GetWindowsDirectoryA
GetVersion
GetLocalTime
FindClose
EnumResourceNamesA
ExitProcess
InterlockedExchange
GetCurrentProcessId
FindFirstFileA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
SelectObject
SetTextColor
Rectangle
DeleteMetaFile
GetObjectA
EnumFontFamiliesExA
DeleteDC
BitBlt
CreateFontIndirectA
CreateSolidBrush
CreateCompatibleDC
CreateRectRgn
RestoreDC
DeleteObject
GetStockObject
GetDeviceCaps
TextOutA
SaveDC
GetTextExtentPoint32A
SetBkMode
CreateCompatibleBitmap
winmm
mciSendCommandA
sndPlaySoundA
user32
SetWindowLongA
ReleaseCapture
GetWindowLongA
MoveWindow
LoadCursorA
ReleaseDC
GetWindowInfo
SetCursor
GetSysColor
SetWindowPos
GetDC
IsWindow
FillRect
GetDlgItem
SetCapture
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ