Static task
static1
Behavioral task
behavioral1
Sample
1581dcba3c9ed9ecde6506e7a105c71a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1581dcba3c9ed9ecde6506e7a105c71a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
1581dcba3c9ed9ecde6506e7a105c71a_JaffaCakes118
-
Size
65KB
-
MD5
1581dcba3c9ed9ecde6506e7a105c71a
-
SHA1
a32fa59af3691a4d4f759897aad040e5e23dca20
-
SHA256
ab6f12c1ecd3c4cc8957b537b8c71d85505e3623a734a68e1988f129f112ad7c
-
SHA512
44319ff91ea838d866a64c9ba8118f0ee04433854599ccfbf61ebe152f2bce368ff1aad014d94abb8cb1da2221daf44ebdd5c3135a75d1b4c6788d0b074c6f37
-
SSDEEP
768:5fVvcgfxCWLvBlHa4LIushRaDkJ23Gj3TEJdeQaOmb1wkGq6+sQCGVjdrcPK3Qm:9Jx5XaPIDu2WzT6eQa9EwCGdOPK3x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1581dcba3c9ed9ecde6506e7a105c71a_JaffaCakes118
Files
-
1581dcba3c9ed9ecde6506e7a105c71a_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a8bbdf3be06a0d4f48bc45138282198
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
ICSendMessage
ICSeqCompressFrameEnd
ICGetDisplayFormat
MCIWndCreateW
ICRemove
kernel32
UnmapViewOfFile
lstrlenA
WriteFile
SetUnhandledExceptionFilter
RaiseException
CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
MapViewOfFile
msvbvm60
__vbaAryRebase1Var
__vbaFileCloseAll
__vbaCyAdd
__vbaCheckType
__vbaAryRecMove
advapi32
LsaDeleteTrustedDomain
LsaICLookupSids
RegOpenKeyExA
LsaCreateTrustedDomainEx
wininet
InternetReadFile
InternetConnectA
InternetCanonicalizeUrlA
FindFirstUrlCacheEntryA
FindFirstUrlCacheGroup
user32
IsCharLowerA
CharLowerA
ole32
OleInitialize
WriteFmtUserTypeStg
WriteClassStm
WriteClassStg
CoCreateInstance
CoGetClassObject
CoGetMalloc
CoInitialize
CoUninitialize
CreateDataAdviseHolder
GetConvertStg
OleDuplicateData
OleGetClipboard
StringFromGUID2
OleSaveToStream
OleSetClipboard
OleUninitialize
dsound
DirectSoundFullDuplexCreate
DirectSoundEnumerateW
DirectSoundEnumerateA
DirectSoundCaptureEnumerateA
Sections
.text Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ