Static task
static1
Behavioral task
behavioral1
Sample
ade482098061bd4302b4488126c4dd4d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ade482098061bd4302b4488126c4dd4d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ade482098061bd4302b4488126c4dd4d_JaffaCakes118
-
Size
5.7MB
-
MD5
ade482098061bd4302b4488126c4dd4d
-
SHA1
2abf8c15f46e24a9c3665cd37fd0d40680ff14e0
-
SHA256
23f25745751a0b64d08d05ef00597b8ae8887fc3f274ab2a81a5d33b3733ceaa
-
SHA512
b02837c7c21d67726e519b8349b4ab9e97c348f02a776146dd08ad73de6ea8f4562542b04fa176389c33e09407abb70930aab6903812e3a8795f99000d5179de
-
SSDEEP
98304:61m8JzEVenWZJS+n6r/5N68xpP84a3NvoRW4uZ0TGQxf1pmSfWmPlFzHxmk+pDML:6w8JoVenW3S+U/53Tj4vOuZ0yQxNhfvl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ade482098061bd4302b4488126c4dd4d_JaffaCakes118
Files
-
ade482098061bd4302b4488126c4dd4d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f84a405332bc4aaccd3726122815f5f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
FatalAppExitA
GetBinaryTypeA
FindResourceExA
LeaveCriticalSection
GetSystemInfo
GetProcessTimes
LoadLibraryExW
GetCommConfig
GetFileAttributesA
PeekNamedPipe
ReadConsoleOutputA
CompareStringA
MoveFileExA
WritePrivateProfileStringA
MultiByteToWideChar
GlobalGetAtomNameW
VirtualAllocEx
CancelIo
LoadLibraryExA
GetWindowsDirectoryA
_llseek
SetHandleCount
EraseTape
GetVolumeInformationW
lstrcatW
SetFileTime
CreateFileW
ConnectNamedPipe
GetSystemTime
QueryDosDeviceW
GetComputerNameW
ExitProcess
VirtualUnlock
user32
GetMenuItemID
SetSysColors
ModifyMenuA
GetMenuItemInfoA
GetClipboardFormatNameW
TrackMouseEvent
SetClipboardData
GetWindowContextHelpId
LoadCursorW
OpenIcon
GetUpdateRgn
GetKeyboardLayoutList
SetWindowPos
DefFrameProcA
GetAncestor
GetWindowRect
GetUserObjectInformationA
SetActiveWindow
GetCaretBlinkTime
gdi32
SetDIBits
CreateDIBSection
GetBkMode
CreateSolidBrush
PaintRgn
EnumFontsW
StartDocA
GetEnhMetaFileHeader
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerFindFileA
advapi32
RegSetValueExA
LogonUserA
GetPrivateObjectSecurity
SetSecurityInfo
BuildTrusteeWithNameW
RegQueryValueA
GetSecurityDescriptorLength
EqualSid
ObjectDeleteAuditAlarmW
RegEnumKeyW
ole32
CoReleaseMarshalData
OleSetContainedObject
ws2_32
gethostname
WSAResetEvent
WSAInstallServiceClassW
WSAGetServiceClassInfoW
WSASocketW
msvcrt
_wsplitpath
_makepath
_wctime
_mbsinc
_mbscpy
getchar
_chmod
clearerr
_wspawnvp
_wcsrev
_getmbcp
ftell
_strdup
_snprintf
wcstombs
_mbsicmp
_pctype
_tempnam
iswxdigit
_vsnwprintf
_stricoll
rewind
bsearch
Sections
.text Size: 2KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ