Static task
static1
Behavioral task
behavioral1
Sample
8dc958504095a02db734766b2a473d66_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8dc958504095a02db734766b2a473d66_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8dc958504095a02db734766b2a473d66_JaffaCakes118
-
Size
175KB
-
MD5
8dc958504095a02db734766b2a473d66
-
SHA1
a991daffdbb2e69b9152318510923e3013d22585
-
SHA256
2ea2aa8d1421cdf39abde2ee04850b79e89306d7f7e74e2ea3971cf4bd89a44e
-
SHA512
6d77cf8ac2f34f710dc5c3c8f9f6acd509bdb52843eade64e36a619f37968598b76e7936036dcb8e2d37e19fccd15fd738bee919d4ca280b2d7c051f4374b9d7
-
SSDEEP
3072:HUv9SNZz9Gxs1IVRPRMUfHu3vC9H9QFtF8cZ+xTcMvr4XOgd7UMMnMMMMMX7I7Da:0YxbKpMoHu3a19QFttZ1Mv5gdgMMnMM3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8dc958504095a02db734766b2a473d66_JaffaCakes118
Files
-
8dc958504095a02db734766b2a473d66_JaffaCakes118.exe windows:5 windows x86 arch:x86
3d93635d27e85d61af1700a7f9095486
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
LoadCursorA
SetFocus
CreateWindowExW
GetParent
ShowWindow
LoadStringA
DialogBoxParamA
DialogBoxParamW
SendDlgItemMessageA
LoadImageA
GetWindowRect
GetWindowLongA
SetDlgItemTextA
GetDC
DialogBoxIndirectParamW
SetCursor
GetDlgItemTextA
ReleaseDC
LoadBitmapA
CallMsgFilterA
SetWindowLongA
WinHelpA
GetSysColor
SendMessageW
MessageBeep
GetDlgItem
EnableWindow
DialogBoxIndirectParamA
shlwapi
StrCatBuffW
shell32
ShellExecuteA
wintrust
WTHelperGetProvSignerFromChain
WTHelperGetProvCertFromChain
WintrustAddActionID
WinVerifyTrust
WintrustRemoveActionID
WTHelperCertIsSelfSigned
kernel32
lstrcmpiA
GetLastError
GetSystemTimeAsFileTime
CompareFileTime
GetCurrentProcess
GetProcAddress
GetDateFormatA
SetProcessWorkingSetSize
HeapReAlloc
TerminateProcess
lstrlenW
VirtualAlloc
SetUnhandledExceptionFilter
InitializeCriticalSection
HeapFree
ExitProcess
WinExec
InterlockedCompareExchange
GetCommandLineA
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
HeapAlloc
GetTickCount
lstrlenA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
gdi32
SelectObject
GetTextExtentPointA
DeleteObject
GetTextMetricsA
GetTextExtentPointW
GetTextMetricsW
cfgmgr32
CM_Get_Child
msi
MsiDatabaseExportW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ