Static task
static1
Behavioral task
behavioral1
Sample
12fa81f3fbfd12b5421a362bb3a98490_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
12fa81f3fbfd12b5421a362bb3a98490_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12fa81f3fbfd12b5421a362bb3a98490_JaffaCakes118
-
Size
1.2MB
-
MD5
12fa81f3fbfd12b5421a362bb3a98490
-
SHA1
2007e2b278f521d5f639f4d97f893126c1a1fa9d
-
SHA256
b5477a88e0f94c10b39f2128d012ab48e38301944775fab508bf2119c20eb61d
-
SHA512
62da650118749cfef3e1a5c91c59cdd5ab38840bf13e1a2365c12a11f04e29a54240b29652c8c6b414e28363d2e09fb50b9f576d8c5884cb4f663e34f284d5bc
-
SSDEEP
24576:1/cw3pcRZbaokx9+FBlsnD68K8N8qoHRQu6ja0+ANLnu00AT:Nf5cRgO8D6koH0m0XduQT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12fa81f3fbfd12b5421a362bb3a98490_JaffaCakes118
Files
-
12fa81f3fbfd12b5421a362bb3a98490_JaffaCakes118.exe windows:4 windows x86 arch:x86
79d4075858cbd75820dc4e435df69f05
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex
advapi32
RegQueryValueExA
RegQueryValueExA
user32
GetKeyboardType
CreateWindowExW
kernel32
LoadLibraryA
SuspendThread
GetCurrentThread
ExitProcess
TlsSetValue
LoadLibraryA
SuspendThread
GetCurrentThread
ExitProcess
lstrlenA
LoadLibraryA
SuspendThread
GetCurrentThread
ExitProcess
Sleep
gdi32
UnrealizeObject
CreateDIBSection
version
VerQueryValueA
ole32
CoTaskMemAlloc
comctl32
_TrackMouseEvent
shell32
ShellExecuteA
SHGetSpecialFolderPathA
d3d9
Direct3DCreate9
bass
BASS_ChannelGetPosition
Sections
.text Size: 951KB - Virtual size: 950KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 72B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zylms Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zylmi Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE