Static task
static1
Behavioral task
behavioral1
Sample
b94b8a4282386f54ce35f50aab97c606_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b94b8a4282386f54ce35f50aab97c606_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b94b8a4282386f54ce35f50aab97c606_JaffaCakes118
-
Size
134KB
-
MD5
b94b8a4282386f54ce35f50aab97c606
-
SHA1
612f619aba22b5004f9aec5405b2abde43245006
-
SHA256
8c2f2124bc4adb52dd0fa5ed56db0f4cc85a7da297a0722e30e13bbccb866ef3
-
SHA512
df848240ab99e393b5ac070c070c49cc1b434f86ea6485fa6675f85c19285b04c490e0c7935cba6eb32a443929d75066a94a4300908793cbe45587c66c119c35
-
SSDEEP
3072:/9LJFzFeZWJcgyTC9xEUinA93zrn1yHsVVHV2cuDfi2+Ai:/9dG4cgzxEU/3zhyHsHgxs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b94b8a4282386f54ce35f50aab97c606_JaffaCakes118
Files
-
b94b8a4282386f54ce35f50aab97c606_JaffaCakes118.exe windows:5 windows x86 arch:x86
dde839877fc9c80ac9aaab60e7095090
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
IsBadWritePtr
GetModuleHandleA
CreateDirectoryA
GetStartupInfoA
DeleteFileW
lstrcmpiW
IsDBCSLeadByte
VirtualProtect
ExpandEnvironmentStringsA
lstrlenA
WaitForMultipleObjects
SetEnvironmentVariableA
msvcrt
ungetc
log
__getmainargs
_adjust_fdiv
_except_handler3
ftell
_XcptFilter
__setusermatherr
__p__commode
_ultoa
sin
fputs
_initterm
_controlfp
_fullpath
strchr
malloc
__p__fmode
strstr
__set_app_type
wcstoul
exit
_acmdln
towlower
gdi32
CreateFontW
SetWindowExtEx
EnumFontFamiliesA
GetPaletteEntries
DeleteDC
Chord
comctl32
ImageList_AddMasked
CreatePropertySheetPageA
InitCommonControls
ImageList_BeginDrag
CreatePropertySheetPageW
ImageList_Write
ImageList_SetIconSize
ImageList_LoadImageW
CreateToolbarEx
ImageList_Create
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Remove
shell32
SHGetMalloc
SHGetSpecialFolderPathA
Shell_NotifyIconW
SHGetDesktopFolder
DragQueryFileA
SHGetFileInfoA
ShellExecuteExW
user32
PeekMessageA
GetSystemMenu
SetActiveWindow
ScrollWindow
ShowCursor
InsertMenuA
SetCursor
ole32
OleUninitialize
CoCreateInstance
RevokeDragDrop
CoRegisterClassObject
StgCreateDocfileOnILockBytes
ProgIDFromCLSID
CoSetProxyBlanket
CreateStreamOnHGlobal
CoInitializeSecurity
StringFromIID
IIDFromString
OleFlushClipboard
CoTaskMemRealloc
StgOpenStorageOnILockBytes
CoTaskMemAlloc
advapi32
CryptHashData
OpenSCManagerW
CopySid
RegCreateKeyA
RegEnumKeyExW
GetTokenInformation
RegDeleteKeyW
OpenServiceW
RegDeleteValueA
RegEnumValueW
RegQueryInfoKeyW
ControlService
RegCreateKeyExA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerInstallFileW
VerQueryValueW
oleaut32
SafeArrayCreate
SysAllocStringByteLen
VariantCopyInd
GetErrorInfo
SafeArrayGetUBound
SetErrorInfo
CreateErrorInfo
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ