Static task
static1
Behavioral task
behavioral1
Sample
Information.Pdf______________________________________________________________.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Information.Pdf______________________________________________________________.exe
Resource
win10v2004-20240802-en
General
-
Target
d4295da3466705fd7068087c9433b8fb_JaffaCakes118
-
Size
158KB
-
MD5
d4295da3466705fd7068087c9433b8fb
-
SHA1
010887a1e6e3a09a9f50337a4137e8f6c65c59ba
-
SHA256
8ad2fd244ff06de8cec68bfc2f286350baee87f77ddf5e222c7cc7f3d3a47a30
-
SHA512
7ebde43ed492e754369cbb6bfe86290f2e2e899b84417b13ed307f1e93bc5d053a4734e633f250fe493bf324dc204ea5ef7a1e4a740a3c68d1fac55eacd95410
-
SSDEEP
3072:2Sz6HUmron78xyLIzRhMIVJufco/M3k6hhLQXsc2C/LujHRcPS3Gkc2/bm518gR7:szrLzvAnohLQf/4AS3+38gDiF1cl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Information.Pdf______________________________________________________________.exe
Files
-
d4295da3466705fd7068087c9433b8fb_JaffaCakes118.zip
-
Information.Pdf______________________________________________________________.exe.exe windows:4 windows x86 arch:x86
88154853552bfee1e4b5d778d73020bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MoveFileExW
SetCalendarInfoA
GetCPInfo
IsBadWritePtr
GetModuleHandleA
ReleaseMutex
_lopen
SetVolumeLabelA
GetLocaleInfoW
SetCommTimeouts
SetProcessShutdownParameters
WriteProcessMemory
DeviceIoControl
MapViewOfFileEx
GetTapePosition
GlobalWire
LoadLibraryExA
DefineDosDeviceA
GetDefaultCommConfigW
GlobalFree
SetLastError
GetThreadTimes
GetDevicePowerState
GetCurrentProcessId
VirtualLock
LCMapStringA
CreateEventA
GetStartupInfoA
SetComputerNameExW
GetNamedPipeInfo
GlobalDeleteAtom
DeleteTimerQueue
LocalLock
msvcrt
time
_controlfp
_mbsrev
_endthreadex
_pclose
_wgetcwd
_i64tow
realloc
_toupper
_exit
_XcptFilter
_utime64
_ismbcalnum
wcslen
_acmdln
_onexit
longjmp
qsort
_strtime
_ismbcl0
_expand
_mbsnset
_setsystime
fscanf
_pipe
printf
cos
__setusermatherr
_copysign
_except_handler3
__p__commode
_gcvt
_ismbcdigit
_itow
_inp
towupper
exit
_adjust_fdiv
__p__fmode
_initterm
_getdllprocaddr
__getmainargs
_wfindfirsti64
__set_app_type
user32
DrawTextExW
GetUserObjectInformationW
GetAltTabInfoA
GetKeyboardType
SetMessageQueue
ActivateKeyboardLayout
SetWindowPos
SetWindowRgn
SendDlgItemMessageA
DestroyWindow
ModifyMenuA
GetComboBoxInfo
GetOpenClipboardWindow
InSendMessage
CharToOemA
CreateMenu
EnumClipboardFormats
WINNLSEnableIME
InvertRect
OemToCharBuffW
GetClipCursor
DeferWindowPos
AppendMenuW
RegisterClipboardFormatA
SetRect
FindWindowA
SwapMouseButton
DefFrameProcW
GetActiveWindow
ChangeClipboardChain
DestroyIcon
TranslateAcceleratorA
ToUnicode
IsHungAppWindow
CharToOemBuffW
GetMenuState
LoadKeyboardLayoutA
VkKeyScanExA
GetParent
GetMenuInfo
GetLastActivePopup
DdeConnect
DlgDirSelectExA
ReplyMessage
GetSubMenu
UnregisterClassA
FindWindowExA
UnregisterDeviceNotification
TileChildWindows
SetWindowWord
gdi32
GetCharacterPlacementA
ChoosePixelFormat
ColorCorrectPalette
PatBlt
SetDCBrushColor
GetTextExtentPointW
SetMiterLimit
GetGlyphOutlineA
GetTextExtentExPointI
GetEnhMetaFilePaletteEntries
SetGraphicsMode
SetBkMode
FillRgn
SetMetaFileBitsEx
RealizePalette
SetPixelFormat
GetOutlineTextMetricsW
MoveToEx
GetCharacterPlacementW
CreateDIBPatternBrushPt
GetCharWidthI
SetDCPenColor
UpdateICMRegKeyA
Chord
SetBoundsRect
CreateEnhMetaFileA
CreateDIBSection
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ