Static task
static1
Behavioral task
behavioral1
Sample
a76001bfa46e1a9324073890375a916d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a76001bfa46e1a9324073890375a916d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a76001bfa46e1a9324073890375a916d_JaffaCakes118
-
Size
573KB
-
MD5
a76001bfa46e1a9324073890375a916d
-
SHA1
10ec4b44998caf7c3c69064de22054d77482af8d
-
SHA256
301deb4463f73961db3de6e4b49451fe484c647950889a4d425076a3f20060c7
-
SHA512
b5f9daf8658243d37ab1a9ad8b26c5f2bdf987860daa79d993e7d827853307aa6781fd2579b33e4f2bc9868424b3fabea7f89565839e90a2ad0ba2cb77865f2d
-
SSDEEP
12288:+yHx0H+pgoJdDRUD0Y5u/4EO7PwWMYJDB96GANcv9Xi:5HyepgoJ4bIJOT5t1BmM9Xi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a76001bfa46e1a9324073890375a916d_JaffaCakes118
Files
-
a76001bfa46e1a9324073890375a916d_JaffaCakes118.exe windows:4 windows x86 arch:x86
450696b966d8727f7def654307d701ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesA
GetConsoleCursorInfo
WritePrivateProfileSectionW
UnmapViewOfFile
LeaveCriticalSection
GetFileType
CompareStringW
GlobalReAlloc
GetCommandLineW
ConnectNamedPipe
GetProcessHeap
IsValidLocale
GetBinaryTypeA
EndUpdateResourceA
CancelIo
EnumSystemCodePagesW
LoadLibraryExA
GetSystemTime
GetModuleFileNameW
GetVolumeInformationW
ExitThread
SetCurrentDirectoryA
SuspendThread
WriteProcessMemory
WaitNamedPipeA
VirtualQuery
FreeLibrary
GetOverlappedResult
SetLastError
FlushFileBuffers
GlobalFree
_hread
ExitProcess
user32
UpdateWindow
DrawAnimatedRects
MessageBoxIndirectW
SendMessageTimeoutW
ChildWindowFromPoint
GetKeyboardLayoutNameW
DispatchMessageA
GetMonitorInfoW
SetWindowLongA
ReleaseDC
FindWindowW
GetClipboardFormatNameA
version
VerQueryValueA
advapi32
CryptAcquireContextA
RegisterServiceCtrlHandlerW
RegOpenKeyA
SetTokenInformation
GetSecurityDescriptorGroup
LookupAccountSidA
RegQueryInfoKeyW
CryptCreateHash
LogonUserW
ws2_32
WSAAsyncGetHostByName
recv
WSAConnect
getprotobyname
ole32
ReadClassStg
ReadClassStm
oleaut32
QueryPathOfRegTypeLi
SafeArrayRedim
LoadTypeLi
SafeArrayUnaccessData
SafeArrayPutElement
Sections
.text Size: 2KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ