Static task
static1
Behavioral task
behavioral1
Sample
ac06f3a5c848417aaf915fab686a8bcc_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
ac06f3a5c848417aaf915fab686a8bcc_JaffaCakes118
-
Size
152KB
-
MD5
ac06f3a5c848417aaf915fab686a8bcc
-
SHA1
fff78d903680dc8668ac6b211f26aa44a0fd1a0b
-
SHA256
6c2be8df889c618d113eed7090605bed3df32366a975bb4dd8ab7af858bedb37
-
SHA512
c2eeeb59be691189afcee12a7ffa7a6a56a96bbdf340922d3bdd9f10817760614d69f9f5248d8993d71af535566cf6af949e86ce67fcb3000b5b1ca6d7695355
-
SSDEEP
1536:xBqwllIT75OKLjPn6A5muwXloYNPjtm6Oh8E:SwllIBOAjPnT5mFy0jsL8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac06f3a5c848417aaf915fab686a8bcc_JaffaCakes118
Files
-
ac06f3a5c848417aaf915fab686a8bcc_JaffaCakes118.exe windows:1 windows x86 arch:x86
ce43e05a34fa828797ff138643c6628d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
lstrcpyW
InterlockedDecrement
EnterCriticalSection
lstrlenW
VirtualFree
SetUnhandledExceptionFilter
InterlockedDecrement
WriteFile
LocalAlloc
ExitProcess
HeapReAlloc
LeaveCriticalSection
lstrcpyW
SetFilePointer
GetCommandLineA
lstrcpyW
EnterCriticalSection
GetLastError
GetTickCount
ReadFile
LoadLibraryW
TerminateProcess
GetModuleFileNameA
HeapAlloc
lstrcpyW
GetStartupInfoW
CloseHandle
user32
SetWindowLongW
DispatchMessageA
SetCapture
SetFocus
SetCapture
GetWindowLongW
EndDialog
LoadStringA
GetKeyState
GetWindowLongW
ReleaseCapture
LoadStringW
UpdateWindow
ScreenToClient
LoadCursorW
MessageBeep
IsWindow
SetCursor
DialogBoxParamW
SendMessageA
LoadIconW
GetMenu
advapi32
RegSetValueExW
RegOpenKeyW
RegOpenKeyW
RegCreateKeyExW
RegDeleteValueW
FreeSid
RegDeleteKeyW
AddAccessAllowedAce
RegQueryValueExW
OpenProcessToken
GetTokenInformation
OpenProcessToken
AllocateAndInitializeSid
RegSetValueExA
gdi32
GetObjectW
GetDeviceCaps
CreateCompatibleDC
CreateBitmap
GetStockObject
CreateBitmap
DeleteDC
CreateCompatibleBitmap
SetTextColor
SelectObject
DeleteObject
CreateCompatibleDC
SetBkMode
GetDeviceCaps
CreateCompatibleBitmap
GetObjectW
LineTo
Sections
Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE