Static task
static1
Behavioral task
behavioral1
Sample
c16f92def6295ecef51bbea5c1f8f203_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c16f92def6295ecef51bbea5c1f8f203_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c16f92def6295ecef51bbea5c1f8f203_JaffaCakes118
-
Size
220KB
-
MD5
c16f92def6295ecef51bbea5c1f8f203
-
SHA1
831e8f654fd7d53d83dfe7bfd4ca29ba99efa2aa
-
SHA256
eca87b6850ded9dab6a6e8afc42f8d4ad2c86ae1c1fda4a573ffbeb1b7570212
-
SHA512
14287223ff5db0acfa197fac33eaa7fd9576eeb77a17f3f68defd7a8f43bd26d49adcfd24ec9348250d9ed088a3b54f02c5d6ceea3816d86f67ec60bc2ed19cd
-
SSDEEP
3072:8NrUd3Bp8hFMRZ9atCSkLGJ/+P4PlvRVo633Gdt/tmnwFKJJ+NUMihP2rFz7V1du:8Nwd3eM/0HPl06ddJJ+AhPA7nd7/69Sa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c16f92def6295ecef51bbea5c1f8f203_JaffaCakes118
Files
-
c16f92def6295ecef51bbea5c1f8f203_JaffaCakes118.exe windows:4 windows x86 arch:x86
d5252f98612a75a35ab1cce5790a6a49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegDeleteKeyW
RegEnumValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueW
RegSetValueExW
kernel32
CloseHandle
CreateFileA
CreateFileMappingW
CreateFileW
ExitProcess
InitializeCriticalSection
MapViewOfFile
SetFilePointer
SetUnhandledExceptionFilter
UnmapViewOfFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
signal
sprintf
sscanf
strcpy
wcscpy
user32
AdjustWindowRectEx
BeginPaint
BringWindowToTop
CallWindowProcW
ChangeDisplaySettingsW
CheckMenuItem
CheckMenuRadioItem
CloseClipboard
CopyRect
CreateDialogParamW
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageW
DrawEdge
DrawIcon
DrawStateW
EmptyClipboard
EnableWindow
EndPaint
EnumDisplaySettingsW
EnumWindows
ExitWindowsEx
FillRect
FlashWindow
GetActiveWindow
GetCapture
GetClassInfoW
GetClassNameW
GetClientRect
GetDC
GetDesktopWindow
GetDlgItem
GetForegroundWindow
GetIconInfo
GetMenuItemCount
GetMenuItemInfoW
GetMenuStringW
GetMessageW
GetParent
GetSubMenu
GetSysColor
GetSystemMetrics
GetUpdateRect
GetUpdateRgn
GetWindow
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsWindow
IsWindowEnabled
IsZoomed
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
MessageBeep
MessageBoxW
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
RegisterClassW
RegisterHotKey
ReleaseCapture
ReleaseDC
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetForegroundWindow
SetParent
SetWindowTextW
ShowCaret
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnionRect
UnregisterClassW
UnregisterHotKey
UpdateWindow
WaitForInputIdle
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 37KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ