Static task
static1
Behavioral task
behavioral1
Sample
a8cce05bc0aa97f36940f771b2feb2d3_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a8cce05bc0aa97f36940f771b2feb2d3_JaffaCakes118
-
Size
152KB
-
MD5
a8cce05bc0aa97f36940f771b2feb2d3
-
SHA1
2e5924608fc3c698500056f125326c4be572a9d0
-
SHA256
fcf6f42bb9fa5885689c0ab66c0b60ee679344a391e23ac32eb014cd0d146e25
-
SHA512
d8ebe97908ba48bef75d55adc98f4faa9e901dbd33f95237afac8be9e3dc71621b567c5f2d94816996cf8fedf873cb427d094e52886cc773005d4caa4ac6ae83
-
SSDEEP
1536:xBqwllIT75OKLjPn6A5muwXloYNPjtm6Oh8w:SwllIBOAjPnT5mFy0jsL8w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8cce05bc0aa97f36940f771b2feb2d3_JaffaCakes118
Files
-
a8cce05bc0aa97f36940f771b2feb2d3_JaffaCakes118.exe windows:1 windows x86 arch:x86
ce43e05a34fa828797ff138643c6628d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
lstrcpyW
InterlockedDecrement
EnterCriticalSection
lstrlenW
VirtualFree
SetUnhandledExceptionFilter
InterlockedDecrement
WriteFile
LocalAlloc
ExitProcess
HeapReAlloc
LeaveCriticalSection
lstrcpyW
SetFilePointer
GetCommandLineA
lstrcpyW
EnterCriticalSection
GetLastError
GetTickCount
ReadFile
LoadLibraryW
TerminateProcess
GetModuleFileNameA
HeapAlloc
lstrcpyW
GetStartupInfoW
CloseHandle
user32
SetWindowLongW
DispatchMessageA
SetCapture
SetFocus
SetCapture
GetWindowLongW
EndDialog
LoadStringA
GetKeyState
GetWindowLongW
ReleaseCapture
LoadStringW
UpdateWindow
ScreenToClient
LoadCursorW
MessageBeep
IsWindow
SetCursor
DialogBoxParamW
SendMessageA
LoadIconW
GetMenu
advapi32
RegSetValueExW
RegOpenKeyW
RegOpenKeyW
RegCreateKeyExW
RegDeleteValueW
FreeSid
RegDeleteKeyW
AddAccessAllowedAce
RegQueryValueExW
OpenProcessToken
GetTokenInformation
OpenProcessToken
AllocateAndInitializeSid
RegSetValueExA
gdi32
GetObjectW
GetDeviceCaps
CreateCompatibleDC
CreateBitmap
GetStockObject
CreateBitmap
DeleteDC
CreateCompatibleBitmap
SetTextColor
SelectObject
DeleteObject
CreateCompatibleDC
SetBkMode
GetDeviceCaps
CreateCompatibleBitmap
GetObjectW
LineTo
Sections
Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE