Static task
static1
Behavioral task
behavioral1
Sample
147230a4115bdd15f9b78b097dd56b65_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
147230a4115bdd15f9b78b097dd56b65_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
147230a4115bdd15f9b78b097dd56b65_JaffaCakes118
-
Size
83KB
-
MD5
147230a4115bdd15f9b78b097dd56b65
-
SHA1
255090ebf6d314e5d5859b0f6d0cc0095119ea4a
-
SHA256
5ed27acdebe2eeb13979836933938742f513a4654dcaf7774bcec4e3b7d82a7e
-
SHA512
46500e32e4eef77c3b3dea9e7c3704429b27f889b1afb3e7663e054500916c899faea51c9dfe049829dfe2eb041958001d43892d7af9a37768da96a5d6dd8ab7
-
SSDEEP
1536:/vSJ2GLzcxa4Kq3V3Pns7PZdKvFGaY3s03bs03as03:/aJ9zcx7KslPs7PvKvB03g03p03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 147230a4115bdd15f9b78b097dd56b65_JaffaCakes118
Files
-
147230a4115bdd15f9b78b097dd56b65_JaffaCakes118.exe windows:4 windows x86 arch:x86
251eb135fb77ef497d62ae818bcd5bd1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glu32
gluBeginSurface
gluSphere
gluDeleteQuadric
gluPickMatrix
gluNurbsProperty
gluDeleteNurbsRenderer
user32
GetLastActivePopup
GetSysColor
IsIconic
GetDlgItemTextA
SetClipboardData
GetClipboardData
CreateWindowExA
ole32
OleCreateEmbeddingHelper
CoUnmarshalHresult
OleLockRunning
CreateStreamOnHGlobal
comctl32
InitCommonControlsEx
CreatePropertySheetPageA
ord5
ord13
CreateStatusWindowW
PropertySheetA
ord6
DrawStatusTextW
ord8
urlmon
IsValidURL
shlwapi
PathSearchAndQualifyW
SHRegCreateUSKeyW
PathMakePrettyW
SHEnumValueA
PathGetDriveNumberA
SHRegGetUSValueW
StrToIntA
PathIsPrefixA
SHDeleteEmptyKeyW
SHRegGetBoolUSValueA
StrDupA
PathMatchSpecW
PathAddExtensionW
StrRChrIW
StrChrW
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
GetStartupInfoA
winspool.drv
DeletePrinter
EnumPrinterDriversW
AddPrinterW
DeletePrinterConnectionA
DeletePrinterDriverA
AddPrinterA
GetPrinterA
GetPrinterW
GetPrinterDriverA
AddPrinterConnectionA
msvfw32
ord2
ws2_32
sendto
ioctlsocket
shutdown
getsockname
accept
getprotobynumber
getpeername
listen
ntohl
msvcrt
ftell
fputs
fsetpos
fopen
freopen
fwrite
fread
free
fputc
_flushall
fseek
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ