Static task
static1
Behavioral task
behavioral1
Sample
1530ccc9c8cee356fb06190e8e37f877_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1530ccc9c8cee356fb06190e8e37f877_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1530ccc9c8cee356fb06190e8e37f877_JaffaCakes118
-
Size
170KB
-
MD5
1530ccc9c8cee356fb06190e8e37f877
-
SHA1
9dd3e316197855bf6f9d9b453f0fcd2de484a7d2
-
SHA256
be5cd30a09d59c4add42acb310b48d482019da2dcade3300857eb1ca7646c198
-
SHA512
a41aacd4c09f4c67da5b3262b749f6f388a96f876b8a46e6cdb9b69d9159536b5f98d00bd24fa506b266f73feb883fcd118556f26fd1e3198eeb21d03f001f6a
-
SSDEEP
3072:HGqHWsXdNkuPwr8/kpCWaKgYbLoinlKg7jE2Hw/F+Rhjdra1UmtzMl12bYe2wI7+:7WsXdNkuWAu/BlL0zI815z612bnXIgig
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1530ccc9c8cee356fb06190e8e37f877_JaffaCakes118
Files
-
1530ccc9c8cee356fb06190e8e37f877_JaffaCakes118.exe windows:4 windows x86 arch:x86
15fadd1bd9bc5e577a778fc99e74e9fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenEventA
GetModuleHandleA
GetLocaleInfoA
LoadLibraryA
GetProcAddress
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
FlushFileBuffers
SetStdHandle
HeapReAlloc
InitializeCriticalSectionAndSpinCount
HeapAlloc
SetFilePointer
ReadFile
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
VirtualAlloc
GetFileSize
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
GetCPInfo
CompareStringA
CompareStringW
HeapFree
GetLastError
CloseHandle
UnhandledExceptionFilter
GetModuleFileNameA
LCMapStringW
user32
SetProcessDefaultLayout
GetKeyboardState
GetMenuBarInfo
ReplyMessage
IMPSetIMEW
TrackPopupMenuEx
SendNotifyMessageW
InsertMenuA
GetWindowModuleFileNameA
IsCharAlphaNumericA
ShowScrollBar
GetClassLongW
GetMenuItemID
CascadeWindows
GrayStringA
DlgDirSelectExA
MapVirtualKeyA
TileChildWindows
ReleaseCapture
SendNotifyMessageA
GetClipboardFormatNameW
CreateDialogParamW
SetMenuContextHelpId
SendMessageTimeoutW
MapWindowPoints
gdi32
ExtCreatePen
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE