Static task
static1
Behavioral task
behavioral1
Sample
a1b73fcad2e8b4e4cab550eb88b22711_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a1b73fcad2e8b4e4cab550eb88b22711_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1b73fcad2e8b4e4cab550eb88b22711_JaffaCakes118
-
Size
131KB
-
MD5
a1b73fcad2e8b4e4cab550eb88b22711
-
SHA1
d23736f0165d1a039937d772fe360503725f95ab
-
SHA256
152567c189e3de9c6b5c3729ebf24904958032c436e6a7fcfa5f173c2e8234f5
-
SHA512
dd6b3fbcb5d4880401214bf5fab1cc39355abac65bc9e24b50ab191ac9221355f42d4653d1ce2f0d3a919c881f0c0c2bec1b8135fc570ad15e3e7ef4ae093576
-
SSDEEP
3072:WQF/nnuq/srMIKms/zXEjZ1REfhBbofsoT2APqNNP3lxH:JnuBs/7OkhCkoiAPcP3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1b73fcad2e8b4e4cab550eb88b22711_JaffaCakes118
Files
-
a1b73fcad2e8b4e4cab550eb88b22711_JaffaCakes118.exe windows:5 windows x86 arch:x86
73e58138320e897e508151dc2703584e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
_lseek
_itow
__setusermatherr
_strnicmp
__set_app_type
_controlfp
__p__fmode
_acmdln
_filelengthi64
memset
__getmainargs
_adjust_fdiv
_setjmp3
_XcptFilter
fwrite
wcsstr
_initterm
_stricmp
sscanf
log10
exit
__p__commode
_wcslwr
_except_handler3
kernel32
GetShortPathNameA
GetSystemTime
GetStartupInfoA
CreateFileMappingA
GetModuleHandleA
EnumCalendarInfoA
GetCommandLineW
VirtualProtect
GetEnvironmentStrings
GetUserDefaultLCID
GetStringTypeExA
WideCharToMultiByte
SystemTimeToFileTime
GetVersionExW
comctl32
CreateStatusWindowA
ImageList_DrawEx
ImageList_Read
ImageList_SetImageCount
CreateToolbarEx
ImageList_ReplaceIcon
CreatePropertySheetPageA
InitCommonControls
ImageList_GetImageCount
ImageList_LoadImageA
user32
WindowFromPoint
PtInRect
EnableWindow
CharLowerA
ScrollWindow
GetSubMenu
DrawEdge
IsRectEmpty
FindWindowA
oleaut32
SysAllocStringByteLen
SafeArrayPutElement
SysStringByteLen
SafeArrayUnaccessData
SafeArrayGetElement
VariantCopy
GetActiveObject
LoadTypeLib
ole32
CreateBindCtx
OleIsCurrentClipboard
CoGetClassObject
OleRun
OleSetMenuDescriptor
CoDisconnectObject
CoCreateGuid
CoRegisterClassObject
gdi32
OffsetClipRgn
SetStretchBltMode
EndPage
ScaleWindowExtEx
GetTextColor
RectInRegion
GetTextFaceA
ArcTo
CreateICA
EnumMetaFile
GetEnhMetaFileHeader
shell32
SHGetFolderPathA
DragFinish
SHBrowseForFolderA
ShellExecuteExW
SHFileOperationW
SHGetPathFromIDListW
Shell_NotifyIconA
SHGetSettings
SHGetPathFromIDListA
advapi32
LookupPrivilegeValueA
RevertToSelf
RegOpenKeyA
RegCreateKeyExA
RegQueryValueExW
OpenSCManagerA
QueryServiceStatus
ControlService
version
VerFindFileW
VerInstallFileW
VerQueryValueW
GetFileVersionInfoSizeW
VerLanguageNameA
GetFileVersionInfoSizeA
VerInstallFileA
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ