Static task
static1
Behavioral task
behavioral1
Sample
0171337b289550c94e6e6d7506355b20_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0171337b289550c94e6e6d7506355b20_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0171337b289550c94e6e6d7506355b20_JaffaCakes118
-
Size
364KB
-
MD5
0171337b289550c94e6e6d7506355b20
-
SHA1
7d846c785df0681ec8f56e03f1ec09eacd9549d2
-
SHA256
20d27b2fb7e074edd8343f97b519e96eb91e8d98207e45ad2181f92ea0e53531
-
SHA512
463994c88824a371204d1a8ca428f2ae5ee0f163f2405b6678daea77390a41ef7f6caecec535941625e07e210c45b50fecf4fa42191f9687f03611919dad6f04
-
SSDEEP
3072:EXlkSZqg6UGDxPCxIQJzA7vfkPS8KklOtzMIpde5AKpemfS2jbxWGqJsi:EXmgkPC5+HkPoklHa85qWSbGqJt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0171337b289550c94e6e6d7506355b20_JaffaCakes118
Files
-
0171337b289550c94e6e6d7506355b20_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e89507fe5b2ee3c883ee5375c98871f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleA
CreateFileW
user32
LoadCursorA
SetWindowPos
OffsetRect
DispatchMessageA
SystemParametersInfoA
GetParent
GetWindowRect
msvcrt
towlower
wcschr
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
free
malloc
wcslen
_except_handler3
_c_exit
wcstoul
advapi32
RegOpenKeyW
comctl32
InitCommonControlsEx
Sections
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata5 Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg6 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rdata6 Size: 1000B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text9 Size: 4B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ