Static task
static1
Behavioral task
behavioral1
Sample
ab13e34448679f844f88abd105a9986f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ab13e34448679f844f88abd105a9986f_JaffaCakes118
-
Size
422KB
-
MD5
ab13e34448679f844f88abd105a9986f
-
SHA1
ee2f2277b7824a7150e05b348c20c987d829e59c
-
SHA256
b3f3d8ea57048176f9fadeaaedd3aa34c8171e7d7830b35cdfb55c9ed8cb754c
-
SHA512
a3c23deef0af0c8498927bcd2a8e99e7e39ad68fd719bb68ec3e2517584bc447a4abfb9fb13e016a9cc03127697630fecefaf4fa68a40176d2a9d9e9928d2f76
-
SSDEEP
12288:d1OKSNj3dKM2K3+5YOwkf2LX7mjoYsxDbqRzFz:dQKOgM2wWYOwkfsmjoYy+Tz
Malware Config
Signatures
-
Molebox Virtualization software 1 IoCs
Detects file using Molebox Virtualization software.
resource yara_rule sample molebox -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab13e34448679f844f88abd105a9986f_JaffaCakes118
Files
-
ab13e34448679f844f88abd105a9986f_JaffaCakes118.exe windows:4 windows x86 arch:x86
ea9d9bba03a64139294270345c9aa226
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegDeleteKeyW
RegEnumValueW
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetValueExW
kernel32
CloseHandle
CreateFileMappingW
CreateFileW
EnterCriticalSection
ExitProcess
InitializeCriticalSection
LeaveCriticalSection
MapViewOfFile
ReadFile
SetUnhandledExceptionFilter
UnmapViewOfFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
clock
free
localtime
malloc
memcpy
mktime
signal
sprintf
sscanf
strcpy
time
wcscpy
user32
AdjustWindowRectEx
AppendMenuW
BeginPaint
CallWindowProcW
ChangeDisplaySettingsW
CheckMenuItem
CloseClipboard
CopyRect
CreateAcceleratorTableW
CreateDialogIndirectParamW
CreateDialogParamW
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefWindowProcW
DestroyAcceleratorTable
DestroyCursor
DestroyMenu
DestroyWindow
DispatchMessageW
DrawEdge
DrawFocusRect
DrawMenuBar
DrawStateW
DrawTextW
EnableMenuItem
EnableWindow
EndPaint
EnumDisplaySettingsW
FillRect
FlashWindow
GetAsyncKeyState
GetClassNameW
GetClientRect
GetClipboardData
GetClipboardFormatNameW
GetDC
GetDlgItem
GetForegroundWindow
GetMenuState
GetMessageTime
GetMessageW
GetParent
GetScrollInfo
GetSubMenu
GetSysColor
GetSystemMenu
GetSystemMetrics
GetUpdateRect
GetWindow
GetWindowDC
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InsertMenuW
InvalidateRect
IsDialogMessageW
IsIconic
IsWindow
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsW
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassW
ReleaseDC
RemoveMenu
ScrollWindow
SendMessageW
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetParent
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowRgn
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnionRect
UnregisterClassW
UpdateWindow
WaitForInputIdle
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 492KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ