Static task
static1
Behavioral task
behavioral1
Sample
0d193d4c1f61e888cb9e734d62bcfc80_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0d193d4c1f61e888cb9e734d62bcfc80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0d193d4c1f61e888cb9e734d62bcfc80_JaffaCakes118
-
Size
220KB
-
MD5
0d193d4c1f61e888cb9e734d62bcfc80
-
SHA1
4f813326dfe86cdf17cc071f3f4f87b5f7090c08
-
SHA256
ad49d25080a59ce3844cd2e074572e93fb3e812347cf4f70b01884787279d180
-
SHA512
69d1642f31e1d480fc60bacd11323d611f84027d71bf91c2f7b5bf3e2c6328328a1aa7601e97f7631eb633eb52874b508c36504ace3d95c709c2c1b7f272c633
-
SSDEEP
6144:XDcn4wYs31DCT+5nBA+kG5UOr1f17AJTHb9qj:X4n4g3U8L2497AJTe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d193d4c1f61e888cb9e734d62bcfc80_JaffaCakes118
Files
-
0d193d4c1f61e888cb9e734d62bcfc80_JaffaCakes118.exe windows:4 windows x86 arch:x86
a9a78214e102a22926deb12744217535
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegOpenKeyExA
RegOpenKeyW
RegQueryValueExW
RegQueryValueW
RegSetValueA
RegSetValueW
kernel32
AddAtomA
ConvertThreadToFiber
CreateFiber
CreateFileW
CreateThread
EnterCriticalSection
ExitProcess
FindAtomA
GetAtomNameA
InitializeCriticalSection
LeaveCriticalSection
ReadFile
SetUnhandledExceptionFilter
SwitchToFiber
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
memset
signal
strcpy
strlen
wcscpy
user32
CallNextHookEx
CheckMenuRadioItem
ChildWindowFromPoint
ClientToScreen
CloseClipboard
CreateMenu
CreateWindowExW
DefFrameProcW
DefWindowProcW
DeferWindowPos
DestroyMenu
DestroyWindow
DispatchMessageW
DrawEdge
DrawStateW
DrawTextW
EnableWindow
EndDeferWindowPos
EndPaint
EnumClipboardFormats
EnumDisplaySettingsW
FillRect
GetAsyncKeyState
GetClassNameW
GetClipboardData
GetCursorPos
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetMenuState
GetMenuStringW
GetMessageTime
GetParent
GetSubMenu
GetSysColor
GetSystemMetrics
GetUpdateRgn
GetWindowDC
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuW
InvalidateRect
IsIconic
KillTimer
LoadBitmapW
LoadCursorW
LoadImageW
MessageBeep
MessageBoxW
ModifyMenuW
OpenClipboard
PeekMessageW
PostMessageW
RedrawWindow
RegisterClassW
RegisterClipboardFormatW
RegisterHotKey
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetTimer
SetWindowPos
SetWindowsHookExW
ShowCaret
SystemParametersInfoW
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UnregisterHotKey
ValidateRect
WindowFromPoint
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ