Static task
static1
Behavioral task
behavioral1
Sample
16d5f458ad829e21e3e89b57b80d7e7e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16d5f458ad829e21e3e89b57b80d7e7e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
16d5f458ad829e21e3e89b57b80d7e7e_JaffaCakes118
-
Size
148KB
-
MD5
16d5f458ad829e21e3e89b57b80d7e7e
-
SHA1
2114a38617f096026ace1a2bdd038d0da9e6ffcd
-
SHA256
11c9f64315d08c4e98bda79989b10748cc3556a06fd0ff2092c8a45bd4edc7d9
-
SHA512
84790a88d197bfbd64a9ccbb4c7aa04ab6ec4ddf0b48a72b2c348c64f44fd896cf70a25d56c0330beed585ecab2309148eb0d6fa80869053a0bfcbbde3b9a9c9
-
SSDEEP
3072:SJfWhhTwlNzlYsCeMtSYCzZViIvAtBKlmtFzyfK11ti5s/+7:6uhhTwXysMoYCniftBK8tFW4Ip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 16d5f458ad829e21e3e89b57b80d7e7e_JaffaCakes118
Files
-
16d5f458ad829e21e3e89b57b80d7e7e_JaffaCakes118.exe windows:4 windows x86 arch:x86
43d307e461779fcd43b4bf07bd94ed0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoTaskMemFree
CoUninitialize
ReleaseStgMedium
CreateBindCtx
MkParseDisplayName
CoDisconnectObject
WriteClassStm
CoGetContextToken
StgCreateDocfileOnILockBytes
shell32
SHGetFolderPathA
oleaut32
GetErrorInfo
SysFreeString
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopyInd
kernel32
IsBadHugeReadPtr
ExitProcess
lstrlenW
GlobalAlloc
GetCommandLineA
GetOEMCP
LoadLibraryA
GetProcAddress
ExitThread
IsBadReadPtr
GetModuleHandleA
VirtualAllocEx
VirtualAlloc
LoadLibraryExA
user32
GetTopWindow
GetLastActivePopup
GetWindowLongW
GetMenuState
GetKeyboardLayoutNameA
GetKeyNameTextA
GetSysColorBrush
GetWindowLongA
GetKeyboardType
GetMenuItemInfoA
GetSystemMenu
GetKeyboardLayoutList
GetMenuItemCount
GetIconInfo
GetKeyboardState
GetPropA
GetWindowDC
GetScrollPos
GetKeyboardLayout
GetScrollRange
GetMenuItemID
GetWindow
GetSysColor
GetKeyState
GetMessagePos
GetSubMenu
GetParent
GetScrollInfo
GetMenuStringA
GetMenu
Sections
CODE Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 4KB - Virtual size: 593B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ