Static task
static1
Behavioral task
behavioral1
Sample
8cc3ee635624b4a6f86d8dbe6ff2a654_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8cc3ee635624b4a6f86d8dbe6ff2a654_JaffaCakes118
-
Size
152KB
-
MD5
8cc3ee635624b4a6f86d8dbe6ff2a654
-
SHA1
883c695ecb9d4cfffebe044dec0af0a948d909e4
-
SHA256
1bdf4856ae3b32d963175aba8ef6aee2db1785b2a94f78dde1cad4cd17333ff1
-
SHA512
891900c0dccd342339b758d96f6a4fa9b4cd4f5ecf3c8b9a12f20e8a7089d3f259250806c596b24e00e63248478cd55d3700e6145c7c021826e204713e45d7b3
-
SSDEEP
1536:xBqwllIT75OKLjPn6A5muwXloYNPjtm6Oh8Is:SwllIBOAjPnT5mFy0jsL8Is
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cc3ee635624b4a6f86d8dbe6ff2a654_JaffaCakes118
Files
-
8cc3ee635624b4a6f86d8dbe6ff2a654_JaffaCakes118.exe windows:1 windows x86 arch:x86
ce43e05a34fa828797ff138643c6628d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
lstrcpyW
InterlockedDecrement
EnterCriticalSection
lstrlenW
VirtualFree
SetUnhandledExceptionFilter
InterlockedDecrement
WriteFile
LocalAlloc
ExitProcess
HeapReAlloc
LeaveCriticalSection
lstrcpyW
SetFilePointer
GetCommandLineA
lstrcpyW
EnterCriticalSection
GetLastError
GetTickCount
ReadFile
LoadLibraryW
TerminateProcess
GetModuleFileNameA
HeapAlloc
lstrcpyW
GetStartupInfoW
CloseHandle
user32
SetWindowLongW
DispatchMessageA
SetCapture
SetFocus
SetCapture
GetWindowLongW
EndDialog
LoadStringA
GetKeyState
GetWindowLongW
ReleaseCapture
LoadStringW
UpdateWindow
ScreenToClient
LoadCursorW
MessageBeep
IsWindow
SetCursor
DialogBoxParamW
SendMessageA
LoadIconW
GetMenu
advapi32
RegSetValueExW
RegOpenKeyW
RegOpenKeyW
RegCreateKeyExW
RegDeleteValueW
FreeSid
RegDeleteKeyW
AddAccessAllowedAce
RegQueryValueExW
OpenProcessToken
GetTokenInformation
OpenProcessToken
AllocateAndInitializeSid
RegSetValueExA
gdi32
GetObjectW
GetDeviceCaps
CreateCompatibleDC
CreateBitmap
GetStockObject
CreateBitmap
DeleteDC
CreateCompatibleBitmap
SetTextColor
SelectObject
DeleteObject
CreateCompatibleDC
SetBkMode
GetDeviceCaps
CreateCompatibleBitmap
GetObjectW
LineTo
Sections
Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE