Static task
static1
Behavioral task
behavioral1
Sample
971ac8cb9bade19a0a913b003b9e2eeb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
971ac8cb9bade19a0a913b003b9e2eeb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
971ac8cb9bade19a0a913b003b9e2eeb_JaffaCakes118
-
Size
138KB
-
MD5
971ac8cb9bade19a0a913b003b9e2eeb
-
SHA1
314532a0945825b323b26498629dabd375d29abc
-
SHA256
72fd64c0a3007f30c4b46ae96751a90e9d5f37c95da27dd40914aa2ed9026bed
-
SHA512
a6d018f0d5b8f35cb96451ea49c6998701dc7c909e5c0905bcf159c19d336cf4c2914433900933828b5153e01f41809fa228d2def086175ac425d6459b0b7cbe
-
SSDEEP
3072:8/74MgC/EtG0uTDy6NwhamcQGDG1mR8KhqQv6+YVHu9DjshsfvZUtCp+:HMgSEtGNh+tlS1hqtVCjsmXZUkp+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 971ac8cb9bade19a0a913b003b9e2eeb_JaffaCakes118
Files
-
971ac8cb9bade19a0a913b003b9e2eeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b5154a44b8e12c40137ebcc60d695cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
RestoreDC
SaveDC
CreatePen
Rectangle
SetMapMode
SetBkMode
Ellipse
MoveToEx
ole32
CoFileTimeNow
CoCreateInstance
CoAddRefServerProcess
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoFileTimeToDosDateTime
CoInitialize
OleCreateLinkFromDataEx
OleCreateLinkEx
kernel32
CreateFileMappingA
GetModuleFileNameA
GetPriorityClass
DeviceIoControl
GetVersion
MulDiv
ExitProcess
OutputDebugStringA
GetDateFormatA
FindClose
GetExitCodeThread
GetLastError
FlushFileBuffers
CreateThread
VirtualFree
user32
GetMenuItemID
EndPaint
LoadStringA
ReleaseDC
DefFrameProcA
GetDoubleClickTime
SetTimer
ModifyMenuA
msvcrt
atoi
_except_handler3
strlen
iswctype
qsort
_wcsnicmp
_snprintf
bsearch
__p__fmode
advapi32
StartServiceA
SetTokenInformation
InitializeAcl
QueryServiceObjectSecurity
RegEnumValueA
FreeSid
LookupPrivilegeNameA
Sections
.text Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ