Static task
static1
Behavioral task
behavioral1
Sample
ec85218b8fc6c5d37aad2b12b2b9bd68_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec85218b8fc6c5d37aad2b12b2b9bd68_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec85218b8fc6c5d37aad2b12b2b9bd68_JaffaCakes118
-
Size
267KB
-
MD5
ec85218b8fc6c5d37aad2b12b2b9bd68
-
SHA1
a71f2741ba33a9b4f7b267f9345f10e9fa1045c3
-
SHA256
55d4fe291a4ffed3a3bdb3dab0d929fcc2100bc130892e8837731dbcc5e16ced
-
SHA512
0c3a56c635124d49da5c769c995bb7ca1cbb02f3e3db9842ac180f06b7beb77e862bfad167425b732959c5d26495396c811357edf92e7bb315058902de156afb
-
SSDEEP
6144:gllslxMfjmxPA2XK/l78oJ5sXXZnW4j9NY:RlEqxPlX078oJOZnd9NY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec85218b8fc6c5d37aad2b12b2b9bd68_JaffaCakes118
Files
-
ec85218b8fc6c5d37aad2b12b2b9bd68_JaffaCakes118.exe windows:4 windows x86 arch:x86
be8c8338d08f9483a98f0b7111b1b9a3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetLastError
GetTickCount
GetCurrentProcess
MultiByteToWideChar
GetSystemDirectoryW
GetVersionExA
GetProcessHeap
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsAlloc
GetCurrentThreadId
HeapCreate
ExitProcess
GetModuleFileNameA
GetEnvironmentStringsW
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA
InitializeCriticalSection
LoadLibraryA
CreateMutexW
GetProcAddress
user32
GetSystemMetrics
IsWindow
CharLowerW
GetMenuItemRect
SetMenu
SendDlgItemMessageW
LoadCursorW
GetTopWindow
CreateDialogIndirectParamA
GetClassInfoW
LoadMenuIndirectA
IsDlgButtonChecked
LoadMenuW
LoadBitmapA
ShowCaret
RegisterWindowMessageA
AdjustWindowRect
RegisterWindowMessageW
SetTimer
GetCapture
ActivateKeyboardLayout
SetForegroundWindow
GetMenuItemCount
EndDialog
SetWindowTextA
GetClassInfoExW
GetIconInfo
GetMenuStringA
DialogBoxIndirectParamA
GetActiveWindow
IsMenu
GetMenuStringW
advapi32
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerW
mssip32
CryptSIPGetSignedDataMsg
CryptSIPGetRegWorkingFlags
gdi32
CreateBitmapIndirect
UpdateICMRegKeyA
CreatePalette
CreateDIBSection
CreateFontIndirectExA
RemoveFontResourceW
UpdateICMRegKeyW
TranslateCharsetInfo
CreatePolyPolygonRgn
GetTextExtentPointA
ifmon
InitHelperDll
Sections
CODE Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Gl Size: 2KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.QOuSCV Size: 2KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 82KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.LMER Size: 3KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 132KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.YkpSJz Size: 512B - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gc Size: 5KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ