Static task
static1
Behavioral task
behavioral1
Sample
c8b551bd262e217a8c446f64c68db92f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8b551bd262e217a8c446f64c68db92f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8b551bd262e217a8c446f64c68db92f_JaffaCakes118
-
Size
214KB
-
MD5
c8b551bd262e217a8c446f64c68db92f
-
SHA1
b4da909c3c861da0489793f85c5f5cf919d64820
-
SHA256
a32ca8593b3b618b6cf3700cb92b2a932843c560ba7a34c184011c3c9da420c5
-
SHA512
93b0af8e3b04e9ca7959d8e08ac885693553c0403ec62e5f622581cb99b091a8122c91cba5123a8daa3f849959f03708d1bdec2b36a18db93982aadc95ef9923
-
SSDEEP
3072:23AVQEVqIo8qWr0BZcfDMEzweB+Xdb+V0Z7ECYu1naLjGyIyoH08kH:lVUJW0EL3Ueqd0oLYuVaLjwRdo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8b551bd262e217a8c446f64c68db92f_JaffaCakes118
Files
-
c8b551bd262e217a8c446f64c68db92f_JaffaCakes118.exe windows:4 windows x86 arch:x86
abef7676924722903df1630e26ffee46
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ClientToScreen
DispatchMessageA
DrawIcon
DrawIconEx
EndDialog
EnumWindows
FindWindowA
GetCapture
GetDC
GetFocus
GetScrollInfo
GetWindowPlacement
InvalidateRect
IsChild
IsZoomed
LoadStringA
MessageBoxA
OemToCharA
RegisterClassA
SetForegroundWindow
SetRect
SetScrollInfo
ShowOwnedPopups
ShowWindow
SystemParametersInfoA
TrackPopupMenu
WaitMessage
advapi32
AddAccessAllowedAce
AdjustTokenPrivileges
CheckTokenMembership
CloseServiceHandle
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptAcquireContextA
CryptCreateHash
CryptReleaseContext
FreeSid
InitializeAcl
InitiateSystemShutdownA
QueryServiceStatus
RegDeleteValueW
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
comctl32
CreateToolbarEx
ImageList_Destroy
ImageList_DrawEx
ImageList_GetDragImage
ImageList_GetImageCount
ImageList_SetDragCursorImage
InitCommonControls
InitCommonControlsEx
ole32
CoFreeUnusedLibraries
CoInitializeEx
CoRegisterClassObject
CoRegisterMessageFilter
CoSetProxyBlanket
CoTaskMemFree
CreateItemMoniker
CreateStreamOnHGlobal
OleFlushClipboard
OleInitialize
OleRun
OleSetClipboard
OleSetMenuDescriptor
PropVariantClear
RevokeDragDrop
StgCreateDocfileOnILockBytes
StgOpenStorage
StringFromIID
kernel32
CopyFileA
CreateFileMappingA
DeviceIoControl
FindResourceW
GetCPInfo
GetEnvironmentVariableA
GetExitCodeThread
GetFileSize
GetLocalTime
GetOEMCP
GetStringTypeW
GetUserDefaultLCID
GlobalAddAtomA
GlobalFindAtomA
HeapSize
IsDBCSLeadByte
LoadLibraryA
SetEvent
Sleep
WriteFile
shell32
CommandLineToArgvW
DragFinish
DragQueryFile
DragQueryFileA
ExtractAssociatedIconW
ExtractIconA
SHBrowseForFolderA
SHBrowseForFolderW
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfo
SHGetFileInfoW
SHGetFolderPathA
SHGetMalloc
SHGetPathFromIDList
SHGetSettings
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
ShellExecuteA
ShellExecuteExW
gdi32
CombineRgn
CopyMetaFileA
CreateCompatibleBitmap
CreateFontA
CreateFontW
CreateRectRgnIndirect
EndPath
EnumFontFamiliesA
ExtSelectClipRgn
GetBkMode
GetDIBits
GetTextExtentPoint32A
GetViewportExtEx
MoveToEx
OffsetRgn
SetDIBitsToDevice
SetEnhMetaFileBits
SetTextJustification
StretchDIBits
StrokeAndFillPath
TextOutA
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
FGztsVVu Size: 2KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE