Static task
static1
Behavioral task
behavioral1
Sample
163262286eb27cdf9739eb7dfaf3cbf3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
163262286eb27cdf9739eb7dfaf3cbf3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
163262286eb27cdf9739eb7dfaf3cbf3_JaffaCakes118
-
Size
218KB
-
MD5
163262286eb27cdf9739eb7dfaf3cbf3
-
SHA1
6baeb505d20f09221278376b795ffe605da5f5ca
-
SHA256
e960990a970e9730cc29b3991eae8ac829984097f1b8f000066ce074ad0772aa
-
SHA512
52ecb3c5bbbbac70b9291739295ca9d5d2f5876caabdee5abc7c0a85d2a655091757ac873e8617f2a53bd50aaa78f33c2126d06a3577ba23c946f91bea675ea1
-
SSDEEP
6144:Bq/is02fxUnleJeG3uERsBiJuQMetE86F:BqDHpUnleJ7uETJuQLt96
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 163262286eb27cdf9739eb7dfaf3cbf3_JaffaCakes118
Files
-
163262286eb27cdf9739eb7dfaf3cbf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a474fd6d07b7eedb2b155065b8fb5e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
StgCreateDocfileOnILockBytes
CoCreateFreeThreadedMarshaler
OleRegGetUserType
CreateStreamOnHGlobal
comdlg32
GetFileTitleA
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
oleaut32
SysReAllocStringLen
OleLoadPicture
shell32
SHGetSpecialFolderLocation
SHFileOperationA
Shell_NotifyIconA
user32
InsertMenuA
IsIconic
GetSubMenu
IsDialogMessageW
GetSystemMenu
IsRectEmpty
IntersectRect
GetWindowRect
IsChild
KillTimer
GetSysColor
GetWindowThreadProcessId
GetWindowLongA
GetWindowLongW
IsZoomed
IsWindowUnicode
GetWindow
GetTopWindow
IsWindow
InvalidateRect
InflateRect
IsWindowEnabled
GetWindowDC
IsDialogMessageA
GetScrollRange
GetWindowPlacement
IsWindowVisible
InsertMenuItemA
GetWindowTextA
GetSysColorBrush
comctl32
ImageList_Destroy
ImageList_Add
ImageList_GetBkColor
ImageList_Draw
ImageList_DrawEx
ImageList_Create
ImageList_DragShowNolock
ImageList_Read
ImageList_Remove
advapi32
RegOpenKeyA
RegCreateKeyA
GetLengthSid
RegOpenKeyExA
gdi32
CreateBrushIndirect
GetDIBits
GetDCOrgEx
GetClipBox
GetObjectA
CreateCompatibleDC
GetCurrentPositionEx
GetDIBColorTable
SetBkColor
CreateCompatibleBitmap
kernel32
GetCommandLineA
lstrcpynA
GetProcAddress
GetACP
lstrcatA
lstrlenA
WriteFile
VirtualAlloc
MulDiv
lstrlenW
lstrcmpA
WideCharToMultiByte
LocalAlloc
VirtualAllocEx
MoveFileA
LocalReAlloc
WaitForSingleObject
LocalFree
SizeofResource
MoveFileExA
GetModuleHandleA
HeapDestroy
lstrcmpiA
VirtualQuery
VirtualFree
lstrcpyA
IsBadReadPtr
GetLastError
ExitProcess
ExitThread
LoadLibraryExA
version
GetFileVersionInfoSizeA
shlwapi
SHDeleteValueA
PathFileExistsA
SHEnumValueA
SHQueryInfoKeyA
Sections
CODE Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 581B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 1024B - Virtual size: 725B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc7 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc3 Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc9 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ