Static task
static1
Behavioral task
behavioral1
Sample
be15507feab6298f5394c5b34af20a93_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
be15507feab6298f5394c5b34af20a93_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be15507feab6298f5394c5b34af20a93_JaffaCakes118
-
Size
138KB
-
MD5
be15507feab6298f5394c5b34af20a93
-
SHA1
a68cac87368bca780fab3ec859922ac292d2b544
-
SHA256
7e69608a84ddde6f008dcb9ced3d2baac8e790200b853deeb9a9c5a48d1ab1b0
-
SHA512
d9e6a878ccbd3dda00207a759af8cd72bea71cd5bd05a6d2b1f9cf98d74566ae1d5e3176c3e0657cddaa8178aeb753921ff8a912afdd2544876aa8f3738ea667
-
SSDEEP
3072:9IMsoYMBdKR7mEkKdCGjnZ3RBWJwGRqhfs2g:CMsEKmE8GjZ3RwJwg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be15507feab6298f5394c5b34af20a93_JaffaCakes118
Files
-
be15507feab6298f5394c5b34af20a93_JaffaCakes118.exe windows:5 windows x86 arch:x86
60551ac5103ed325e0599e1b0f61921e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr90
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_controlfp_s
memset
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
CloseHandle
OutputDebugStringA
VerLanguageNameA
FreeConsole
Sleep
OutputDebugStringW
lstrlenA
GetCurrentProcess
user32
TrackPopupMenu
SetTimer
MessageBoxA
GetSubMenu
DefWindowProcA
ShowWindow
UpdateWindow
CallWindowProcA
DestroyIcon
LoadMenuA
CreateMenu
CreateWindowExA
SetWindowLongA
gdi32
CreateCompatibleDC
PolyTextOutA
StretchBlt
DeleteDC
BitBlt
GetFontData
comdlg32
PrintDlgA
GetSaveFileNameA
shell32
SHGetFileInfoA
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ