Static task
static1
Behavioral task
behavioral1
Sample
c0407236ecdab77af8860cfa4046bb39_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c0407236ecdab77af8860cfa4046bb39_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c0407236ecdab77af8860cfa4046bb39_JaffaCakes118
-
Size
148KB
-
MD5
c0407236ecdab77af8860cfa4046bb39
-
SHA1
2c056088c3faf0fcaf59df659f38994d831d6e96
-
SHA256
7b5fd08fb30b0c9a827f8f98436c3d6aded7ed34af72c7489d767b65ffbe1ab5
-
SHA512
177666a61c40fa7d58d15090957a9d8b18e659126454e2af6fb5ff62290280a96347b19c17194205561c969d5bfc61adf624c499e5adee27b9df69fbc5efe531
-
SSDEEP
3072:+kSxQmTgfOmIoPDtxtQX8CS5pV/9Z9GWsGIvP4q3NejX5qF:t/m/L6gQh9FIvP4uaX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0407236ecdab77af8860cfa4046bb39_JaffaCakes118
Files
-
c0407236ecdab77af8860cfa4046bb39_JaffaCakes118.exe windows:5 windows x86 arch:x86
92018733bd39c743a203c448c5aed6bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrlenA
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
GetConsoleMode
LocalAlloc
GlobalUnlock
FileTimeToLocalFileTime
VirtualProtect
SystemTimeToFileTime
GetVersionExW
InterlockedCompareExchange
GetLocaleInfoA
lstrcmpiW
FreeEnvironmentStringsA
user32
UpdateWindow
GetSubMenu
SetCapture
PtInRect
GetSysColor
GetPropA
DestroyMenu
SetForegroundWindow
GetSystemMetrics
GetKeyboardType
SetRect
CallNextHookEx
msvcrt
log10
__setusermatherr
__p__commode
ceil
__set_app_type
_except_handler3
__p__fmode
putchar
_wfopen
exit
_XcptFilter
strspn
__getmainargs
_adjust_fdiv
_wcsicmp
memmove
rand
_CIsqrt
_initterm
_acmdln
comctl32
ImageList_Create
ImageList_Remove
ImageList_SetIconSize
InitializeFlatSB
oleaut32
SafeArrayGetElement
GetActiveObject
SysStringByteLen
CreateErrorInfo
VariantClear
shell32
SHGetDesktopFolder
CommandLineToArgvW
ExtractIconExW
SHGetSpecialFolderLocation
SHGetFolderPathW
DragQueryFileW
SHChangeNotify
SHBrowseForFolderA
ole32
CoCreateInstance
StringFromIID
DoDragDrop
CoUninitialize
RegisterDragDrop
ReleaseStgMedium
StringFromCLSID
advapi32
RegOpenKeyW
RegQueryValueA
GetTokenInformation
RegQueryInfoKeyA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE