Static task
static1
Behavioral task
behavioral1
Sample
88a6a27f2a1565e4dc0c7e61faddc9b8_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
88a6a27f2a1565e4dc0c7e61faddc9b8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
88a6a27f2a1565e4dc0c7e61faddc9b8_JaffaCakes118
-
Size
112KB
-
MD5
88a6a27f2a1565e4dc0c7e61faddc9b8
-
SHA1
61360f93ea36b3c35af8f0a35ccfc748e1a0978b
-
SHA256
e77f1492c675a7ff6b2df06aafab5a974477011f26183003ea46d79e173c91dd
-
SHA512
f01f510f862d75730c8c058b59eb864a0bbc7059dc056c1f8d0d47713104661c7a0c75a742dcbd87a073094852ac718eaaa1d591dc5c3e77bc25c219ca05a41f
-
SSDEEP
3072:v+ms0lcuT3sYcg+iesZpBosLwAtNRlJ8qoKABZcC:v+8lHbcHies3BbrN4VZV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88a6a27f2a1565e4dc0c7e61faddc9b8_JaffaCakes118
Files
-
88a6a27f2a1565e4dc0c7e61faddc9b8_JaffaCakes118.exe windows:4 windows x86 arch:x86
b0d97773729cd1ce44e61d0ff0516e28
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
SetSystemCursor
RegisterClassA
PeekMessageA
OpenClipboard
MsgWaitForMultipleObjects
MessageBoxW
GetTopWindow
GetKeyState
GetForegroundWindow
GetCaretPos
EnumPropsA
EmptyClipboard
DispatchMessageA
DialogBoxParamA
DefWindowProcA
CreateWindowExA
CharLowerBuffA
BeginDeferWindowPos
advapi32
FileEncryptionStatusA
GetAce
SetUserFileEncryptionKey
SetSecurityDescriptorDacl
RegisterEventSourceA
RegQueryValueExA
OpenTraceW
LsaSetInformationTrustedDomain
LsaRemoveAccountRights
LookupPrivilegeNameW
I_ScSetServiceBitsA
GetSecurityDescriptorDacl
GetAclInformation
AddAccessDeniedAce
ole32
IsEqualGUID
PropVariantClear
shell32
SHGetSpecialFolderPathW
SHFileOperationW
ShellExecuteA
dinput
DirectInputCreateW
kernel32
GetPrivateProfileSectionW
GetModuleHandleA
GetFileAttributesExA
GetCurrentProcessId
GetStringTypeExA
GetSystemDefaultLangID
GetSystemInfo
GetTempPathW
GetTimeZoneInformation
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
HeapAlloc
HeapCreate
MulDiv
OpenEventW
OpenJobObjectW
ReadFile
SetEnvironmentVariableA
lstrcmpA
WaitForMultipleObjectsEx
GetConsoleOutputCP
GetConsoleAliasA
TlsGetValue
GetCommandLineA
SetFileTime
Beep
GetBinaryTypeA
BindIoCompletionCallback
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnumTimeFormatsA
ExitProcess
FindAtomA
FindAtomW
FindNextVolumeW
FlushConsoleInputBuffer
FormatMessageA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ