Static task
static1
Behavioral task
behavioral1
Sample
06e5a5ac65070ab62c5d3523ff625bfe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
06e5a5ac65070ab62c5d3523ff625bfe_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06e5a5ac65070ab62c5d3523ff625bfe_JaffaCakes118
-
Size
43KB
-
MD5
06e5a5ac65070ab62c5d3523ff625bfe
-
SHA1
5853ddbb900b307e96183eba4723cbe6e7b5eaa4
-
SHA256
74a226b147d524ca9f2569eac2b484a86325c41e218244a84eef4b7516cbac00
-
SHA512
3bb5a8803b6d2c0518f4ecebb01152c61256b853e56829b12304a07da0268feb40e48f5b7bbebc91d87c1dc089dede9ee66cb2a388e10502c50f4b91cb6be22a
-
SSDEEP
768:KcXhA6Hxa27y9FjoZXEhE3SRgbtd+wGVwo:KwhzRfAsUzgb/+wJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06e5a5ac65070ab62c5d3523ff625bfe_JaffaCakes118
Files
-
06e5a5ac65070ab62c5d3523ff625bfe_JaffaCakes118.exe windows:4 windows x86 arch:x86
d33c432347b88eb5a0fe29101c5b786d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
msjet35
ord178
ord154
ord130
ord110
ord176
ord145
ord103
vbajet32
ord1
msjter35
ord5
kernel32
GetProcAddress
GetStringTypeW
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
VirtualAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
FindClose
GetLastError
FindFirstFileA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetCurrentDirectoryA
WideCharToMultiByte
GetFileType
FreeEnvironmentStringsW
MultiByteToWideChar
GetEnvironmentStrings
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
TerminateProcess
HeapAlloc
GetEnvironmentStringsW
GetCurrentProcess
GetStdHandle
ExitProcess
GetVersion
HeapFree
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
GetACP
GetOEMCP
SetHandleCount
GetCPInfo
user32
SetFocus
GetDlgItemTextA
EnableWindow
CreateDialogParamA
MessageBoxA
SendDlgItemMessageA
GetDlgItem
SendMessageA
DialogBoxParamA
SetDlgItemTextA
GetWindowLongA
LoadIconA
SetClassLongA
DispatchMessageA
GetMessageA
TranslateMessage
IsDialogMessageA
PostQuitMessage
EndDialog
comdlg32
GetOpenFileNameA
CommDlgExtendedError
ole32
OleUninitialize
OleInitialize
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE