Static task
static1
Behavioral task
behavioral1
Sample
a79277529cd4e3b78b081283c3ca94ab_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a79277529cd4e3b78b081283c3ca94ab_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a79277529cd4e3b78b081283c3ca94ab_JaffaCakes118
-
Size
97KB
-
MD5
a79277529cd4e3b78b081283c3ca94ab
-
SHA1
86dc0cdf343822827f4299827200778bbe9ebf7e
-
SHA256
85f9969c933d960337ec83337b1e61c15aebde420adb02a6e8d609c76e020f50
-
SHA512
5fa9fdcc3b234fd1b94918bd0ffeccecafb3d494c871d3c03ffeeb6dc7e8732c9c126d9e0fc67095381e997e0bcebebb89c726a323b45117042d02176c99dae7
-
SSDEEP
1536:O24ICN9pMBlM6hRT4HscMtRTt1oxWu5LwIX7ESqVtWJ0XuFqfELIBt4LhhZh:OxXpqz9cMtRTt1oAu5LwHSIBXuLp3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a79277529cd4e3b78b081283c3ca94ab_JaffaCakes118
Files
-
a79277529cd4e3b78b081283c3ca94ab_JaffaCakes118.exe windows:4 windows x86 arch:x86
98e6e3993bf17e793619d9c456e2978c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
ole32
CoCreateGuid
CreateOleAdviseHolder
OleCreateStaticFromData
WriteClassStm
OleRegGetUserType
CoFreeUnusedLibraries
CoDisconnectObject
CreateBindCtx
StgOpenStorage
shell32
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
user32
SendMessageW
MoveWindow
DefFrameProcA
EnableScrollBar
GetKeyboardLayoutNameA
DrawMenuBar
SetScrollInfo
GetDCEx
AdjustWindowRectEx
GetPropA
GetSubMenu
GetKeyState
CallNextHookEx
ChildWindowFromPoint
RegisterClipboardFormatA
RemovePropA
SetWindowsHookExA
GetParent
DispatchMessageW
LoadStringA
DestroyCursor
GetKeyboardType
SendMessageA
DispatchMessageA
GetCursor
CheckMenuItem
ReleaseDC
DrawEdge
SetWindowPlacement
CharLowerBuffA
UnhookWindowsHookEx
RegisterWindowMessageA
ShowScrollBar
TrackPopupMenu
SetFocus
SetScrollPos
GetClientRect
GetKeyboardLayoutList
GetSysColor
InvalidateRect
ScrollWindow
MsgWaitForMultipleObjects
DrawIconEx
GetWindowRect
WindowFromPoint
IsWindow
GetSysColorBrush
KillTimer
OpenClipboard
SetWindowPos
SetRect
GetMenuStringA
FrameRect
IsWindowUnicode
GetScrollPos
GetDlgItem
ScreenToClient
EqualRect
MapVirtualKeyA
ShowOwnedPopups
SetScrollRange
LoadIconA
InsertMenuA
IntersectRect
CharUpperBuffA
GetForegroundWindow
SetPropA
SetClassLongA
DestroyWindow
MapWindowPoints
ClientToScreen
DefWindowProcA
advapi32
RegEnumKeyA
RegEnumValueA
RegEnumKeyExA
RegCreateKeyA
comctl32
ImageList_Add
ImageList_Remove
ImageList_Destroy
ImageList_Draw
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_Read
ImageList_Create
ImageList_Write
ImageList_GetBkColor
msvcrt
srand
memcpy
version
VerInstallFileA
kernel32
ExitThread
GetCommandLineW
GetModuleHandleA
LocalAlloc
LoadLibraryA
GlobalAlloc
GetOEMCP
LoadLibraryExA
IsBadReadPtr
ExitProcess
GetACP
GetProcAddress
VirtualAlloc
gdi32
BitBlt
SetPixel
GetDIBits
GetDIBColorTable
GetObjectA
SelectObject
SelectPalette
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC9 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC4 Size: 1024B - Virtual size: 953B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC0 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RSRC2 Size: 1024B - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC3 Size: 512B - Virtual size: 358B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ