Static task
static1
Behavioral task
behavioral1
Sample
c174154488449387922a6beaccb4143c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c174154488449387922a6beaccb4143c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c174154488449387922a6beaccb4143c_JaffaCakes118
-
Size
253KB
-
MD5
c174154488449387922a6beaccb4143c
-
SHA1
dbed9c3e45f4c0a0427e61db077cbf90218088ec
-
SHA256
6b2fbe97a071933ade07e58b53c9b01f71adffe1633a1c678f4610d0d72bc914
-
SHA512
704d3173c55dd1a88ed0f41dca88e2820d1ae599e694beee73994283744936f2c3f7309e0fd323616b9280854ee442c48f8c2f0956ecb568ddff20981436953d
-
SSDEEP
6144:q2tjN8qg0swN72JnLS1BjieHV4E+7wuTi0ZFStC/Qh:qhqjswAJnLSGK2XwmicEs/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c174154488449387922a6beaccb4143c_JaffaCakes118
Files
-
c174154488449387922a6beaccb4143c_JaffaCakes118.exe windows:4 windows x86 arch:x86
86d24b322efa105d84ba3bd9f89ddc7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetVersionExA
GetProcessHeap
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetLastError
MultiByteToWideChar
ExitProcess
Sleep
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSection
GetProcAddress
winipsec
GetQMPolicy
DeleteMMPolicy
user32
DestroyIcon
InvalidateRect
ShowWindow
ShowCursor
SendMessageW
EndDialog
SetWindowTextA
RegisterClassExA
TrackPopupMenuEx
RegisterClassW
DefWindowProcA
AppendMenuW
UnregisterClassW
LoadBitmapA
SetMenu
SetFocus
PostMessageA
GetMessageW
RegisterClassA
CreateAcceleratorTableW
CopyRect
LoadIconW
GetCursorPos
gdi32
CreateDIBPatternBrush
StretchDIBits
TranslateCharsetInfo
CreatePalette
RemoveFontResourceA
CreateHatchBrush
CreateCompatibleDC
CreateFontA
CreateFontIndirectW
CreatePen
CreateDIBSection
CreatePolygonRgn
GetTextExtentPointA
CreatePolyPolygonRgn
CreatePatternBrush
avifil32
AVIFileGetStream
AVIFileCreateStream
AVIStreamInfoW
AVIStreamGetFrameOpen
AVISaveVW
EditStreamSetInfoW
IID_IGetFrame
AVIFileOpenA
AVIMakeStreamFromClipboard
AVIPutFileOnClipboard
Sections
.icode Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iR Size: 106KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cUtB Size: 111KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ