Static task
static1
Behavioral task
behavioral1
Sample
a819064895b61887a0a9220c89412d51_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a819064895b61887a0a9220c89412d51_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a819064895b61887a0a9220c89412d51_JaffaCakes118
-
Size
158KB
-
MD5
a819064895b61887a0a9220c89412d51
-
SHA1
a6f31eba9436d052b93b0a21f0c433570be757f3
-
SHA256
d189e6bb1afe7d53e8bf55da80ffe484259e999c785aaa6aef34f3e1b31b173d
-
SHA512
bbc0b51d5e655c516f01f28b73b7f7b6fe8750459f44891900fb3d358d2fcd387c92ea460a1a12a8f7aab170c72c5864569625a02a06d5598ebdcd3abe84d6a8
-
SSDEEP
3072:57mVohJDv8h9gmC/2dIVybxc6Chk3rp6YcMwyeHZgwjGajScIjU04Ntl+HecZ:6vdihk3dS9ye5gwbp0KH+HhZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a819064895b61887a0a9220c89412d51_JaffaCakes118
Files
-
a819064895b61887a0a9220c89412d51_JaffaCakes118.exe windows:5 windows x86 arch:x86
b845e8df1654bbd1bdbf20eacdd9c9be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GlobalLock
GlobalHandle
VirtualProtect
GetModuleHandleA
lstrcmpiA
SystemTimeToFileTime
GetVersion
GetFullPathNameA
MulDiv
GetStringTypeW
GetSystemDirectoryW
IsBadCodePtr
GetStartupInfoA
DeleteFileA
user32
GetWindow
GetFocus
DestroyWindow
UpdateWindow
RemovePropA
GetSysColor
PostMessageA
GetWindowThreadProcessId
GetSystemMenu
CharLowerA
msvcrt
log10
sin
__p__fmode
__pioinfo
_getcwd
strchr
__setusermatherr
strspn
strpbrk
isleadbyte
_except_handler3
__set_app_type
_c_exit
_filelengthi64
_get_osfhandle
gmtime
_onexit
_acmdln
__p__commode
rand
_initterm
_XcptFilter
_adjust_fdiv
exit
__getmainargs
fopen
comctl32
CreatePropertySheetPageA
PropertySheetA
CreateToolbarEx
ImageList_GetImageInfo
shell32
SHBrowseForFolderW
ExtractIconExW
SHGetMalloc
SHAddToRecentDocs
SHCreateDirectoryExW
SHBrowseForFolder
SHGetPathFromIDListA
CommandLineToArgvW
SHGetFileInfoA
DragQueryFileA
ole32
CoCreateGuid
CoDisconnectObject
CreateItemMoniker
CoInitialize
OleSetMenuDescriptor
CoGetClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
GetRunningObjectTable
CLSIDFromProgID
ProgIDFromCLSID
OleDraw
IsAccelerator
oleaut32
SysAllocStringByteLen
SafeArrayGetUBound
VariantCopyInd
SysAllocStringLen
SafeArrayRedim
advapi32
RegOpenKeyW
RegCloseKey
OpenSCManagerA
InitializeAcl
CryptHashData
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE