Static task
static1
Behavioral task
behavioral1
Sample
ac91a8e688cb810b41f5a36957216b35_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ac91a8e688cb810b41f5a36957216b35_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ac91a8e688cb810b41f5a36957216b35_JaffaCakes118
-
Size
31KB
-
MD5
ac91a8e688cb810b41f5a36957216b35
-
SHA1
9b5aff3792633d35fad4eb951e6e7afe8770ab4b
-
SHA256
463615be0e9a213c5ed8151bc9513f402d23a5a4d49c42f82daed2ebdcc5cc98
-
SHA512
159fd35757ed4f8a84bcaacfe4d5e74111864e025a0f5246787f38acd8b173108b58a6edd4f6f4d0899a813747fa60d99c2cbfe7c3ec06015af108e2535aa530
-
SSDEEP
384:Ka8m9bRI8+MEDSwW9LTrsJsvceloLLRMXLYhXk4yOy3FYOQ:n8rgEDSwW9LT4JIqfRMMu4y53
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac91a8e688cb810b41f5a36957216b35_JaffaCakes118
Files
-
ac91a8e688cb810b41f5a36957216b35_JaffaCakes118.exe windows:4 windows x86 arch:x86
73271a95e822cb7950637ef50e9c988b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CopyIcon
DialogBoxParamW
GetDC
GetWindowTextLengthA
GetDlgItem
CreateIcon
IsMenu
DialogBoxParamA
CopyRect
DrawTextA
IsWindow
DrawIcon
CloseWindow
GetCursor
GetWindowTextA
GetFocus
GetMenu
LoadMenuA
InsertMenuA
DrawTextW
EndDialog
kernel32
GetOEMCP
lstrcatA
GetCPInfo
GetStringTypeW
GetCommandLineA
GetStdHandle
lstrcpynA
MultiByteToWideChar
GetStringTypeA
GetVersion
GetACP
TerminateProcess
lstrcpynW
GetModuleFileNameA
LCMapStringW
SetHandleCount
CreateFileA
GetFileType
GetStartupInfoA
WriteFile
lstrcpyA
GetCurrentProcess
SetFilePointer
LCMapStringA
comctl32
ImageList_AddIcon
DllGetVersion
CreateToolbarEx
ImageList_DragEnter
MenuHelp
CreateToolbar
InitCommonControls
ImageList_LoadImageW
DrawStatusTextW
ImageList_GetIcon
advapi32
RegEnumKeyW
RegCreateKeyExA
RegEnumKeyExW
RegQueryValueW
RegCreateKeyExW
RegDeleteValueA
RegQueryValueA
RegOpenKeyExW
RegSetValueW
RegQueryValueExA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ