Static task
static1
Behavioral task
behavioral1
Sample
93eee43e3de4346fe31029471ca17400_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
93eee43e3de4346fe31029471ca17400_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93eee43e3de4346fe31029471ca17400_JaffaCakes118
-
Size
30KB
-
MD5
93eee43e3de4346fe31029471ca17400
-
SHA1
46846d1f61e80e2ef055742eda6005b8364300a8
-
SHA256
eb5549a64a0e7e1982f22b6489b3d4b4f87f157aa37be12639f501267b5f305a
-
SHA512
906def82c18538db030a7288b221bc08fa9594805766d903d387deb13642ffc4160d62f414a9d7d0b4c93d6b4ff7e065beb0509943ab592a89859420b45404a3
-
SSDEEP
384:izGojtTFSH8TGXieFLR61b3g/b3pCvr0V0SGu3eJOmNX2zHPmuCqGU0:stjtBSHaGXieFVvFtJeZ8iuFx0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93eee43e3de4346fe31029471ca17400_JaffaCakes118
Files
-
93eee43e3de4346fe31029471ca17400_JaffaCakes118.exe windows:4 windows x86 arch:x86
f1f1c0a85c70d8b556a140dfb24cdfe2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleA
user32
SetDlgItemInt
SendDlgItemMessageA
GetWindowPlacement
CharUpperA
GetMenuStringA
GetTopWindow
CallMsgFilterA
SetWindowTextA
GetDC
SetScrollPos
shell32
DragAcceptFiles
SHGetFileInfoA
gdi32
LineTo
CreateSolidBrush
PolyBezierTo
ExtCreatePen
SelectObject
OffsetClipRgn
SetColorAdjustment
Escape
SetBkColor
SetWindowOrgEx
PlayMetaFileRecord
GetCurrentPositionEx
DeleteDC
IntersectClipRect
GetStockObject
SaveDC
msi
MsiDatabaseCommit
MsiDatabaseExportA
MsiConfigureProductA
MsiConfigureFeatureW
samlib
SamiEncryptPasswords
SamTestPrivateFunctionsUser
SamConnectWithCreds
SamRemoveMultipleMembersFromAlias
kernel32
GetProcAddress
LoadResource
CreateThread
FindFirstFileA
VirtualAlloc
lstrcpyA
EnumSystemLocalesA
GetStringTypeExA
RtlUnwind
GetShortPathNameA
SuspendThread
LocalFree
SetEnvironmentVariableA
HeapReAlloc
TlsAlloc
GetVersionExA
WriteFile
VirtualFree
GlobalGetAtomNameA
ReadFile
LCMapStringW
GetLocalTime
LocalFileTimeToFileTime
LocalReAlloc
GlobalAddAtomA
FlushFileBuffers
LocalAlloc
GetCurrentThreadId
GetSystemTime
FreeLibrary
GlobalDeleteAtom
GetCPInfo
SystemTimeToFileTime
IsValidLocale
SetConsoleCtrlHandler
ExitProcess
GetModuleFileNameA
GetTimeZoneInformation
FileTimeToLocalFileTime
MulDiv
advapi32
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyExA
RegEnumValueA
RegDeleteValueA
RegRestoreKeyA
OpenProcessToken
RegCloseKey
LookupPrivilegeValueA
RegSetValueExA
AdjustTokenPrivileges
RegDeleteKeyA
setupapi
SetupDiOpenDevRegKey
SetupDiSetSelectedDriverA
SetupDiSetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiClassGuidsFromNameA
SetupDiSetDeviceInstallParamsA
SetupGetStringFieldA
SetupFindNextLine
SetupOpenInfFileA
SetupDiCreateDeviceInfoA
SetupCloseInfFile
SetupFindFirstLineA
SetupDiGetDeviceInstallParamsA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ