Static task
static1
Behavioral task
behavioral1
Sample
07e91cb28be210723834e9c629ddd65b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07e91cb28be210723834e9c629ddd65b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07e91cb28be210723834e9c629ddd65b_JaffaCakes118
-
Size
205KB
-
MD5
07e91cb28be210723834e9c629ddd65b
-
SHA1
f3ecdfc0e7f94d48be3573b86f550a9ee64253be
-
SHA256
7e097d279b8924cf71c84c984689017543b7cfea4207896df06da5c6ca8d9f6d
-
SHA512
2c5bafdacca0bff8c20da184e956fe0610e79f210c35d8c5eb5cc17294f84f1fbc343343e1b009bc242e58fa1c7e193e1661fcafc375c6babd7dc65f73833e19
-
SSDEEP
6144:jucc3WPeambyMScFJ4qggM1qiZ0ZU462CK9Fzgms:jxcFaSyJcxQZ0PV9gJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07e91cb28be210723834e9c629ddd65b_JaffaCakes118
Files
-
07e91cb28be210723834e9c629ddd65b_JaffaCakes118.exe windows:4 windows x86 arch:x86
2ab9703cc5acd50fd1e55368310e23a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
OleGetAutoConvert
CLSIDFromProgID
GetHGlobalFromStream
ProgIDFromCLSID
OleRegGetUserType
OleRun
CoCreateGuid
CoGetClassObject
CoFreeUnusedLibraries
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
CLSIDFromString
RegisterDragDrop
GetHGlobalFromILockBytes
StgCreateDocfileOnILockBytes
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromCLSID
ReleaseStgMedium
CoGetMalloc
OleDuplicateData
RevokeDragDrop
CreateILockBytesOnHGlobal
shlwapi
PathStripToRootW
PathIsRootW
PathIsRelativeW
PathIsURLW
PathCanonicalizeW
PathCombineW
rpcrt4
NdrClientCall
RpcBindingSetAuthInfoA
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcStringFreeA
user32
IsClipboardFormatAvailable
SetClipboardData
WinHelpW
MonitorFromWindow
ClipCursor
SetWindowsHookExW
EmptyClipboard
ChildWindowFromPoint
RegisterClassW
DestroyCursor
SetScrollRange
DefWindowProcW
DrawEdge
CallNextHookEx
UnhookWindowsHookEx
ToAscii
DestroyIcon
SetWindowPos
GetSysColorBrush
GetSysColor
comdlg32
GetFileTitleA
gdi32
ExtCreatePen
GetPath
StrokePath
CreatePen
SetTextColor
FlattenPath
GetBkColor
SetStretchBltMode
CreateFontIndirectA
RoundRect
PolyBezier
PlgBlt
GetBitmapBits
AnimatePalette
SetDIBits
kernel32
CreateFiber
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
LocalAlloc
LockFile
SetCommConfig
GetVersionExW
GetVolumeInformationW
GetFileAttributesA
VerLanguageNameW
GetProfileStringW
UnlockFile
EnumResourceNamesW
FlushFileBuffers
SetEndOfFile
GetSystemTime
FlushFileBuffers
CompareStringW
SearchPathW
IsDBCSLeadByte
GetUserDefaultLangID
GetFileType
FindResourceExA
GetSystemDirectoryW
comctl32
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Create
ImageList_Add
ImageList_Destroy
Sections
.text Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ