Static task
static1
Behavioral task
behavioral1
Sample
174b8766bba62e9cc6cf852390b09685_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
174b8766bba62e9cc6cf852390b09685_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
174b8766bba62e9cc6cf852390b09685_JaffaCakes118
-
Size
93KB
-
MD5
174b8766bba62e9cc6cf852390b09685
-
SHA1
86c1059633d0bd80ffbed1f6aa0dc080c9ce5dda
-
SHA256
ad6739d6341b1ddf0e7ad67476bd82155fc223df93e9cc63f483bb0983e84e5a
-
SHA512
a93a94a97c8a625db14e74817b821ca68435ccd51abddf7fede97315662600769a7a6d76e3a5c8761dda117bd895fe75a4f8cc3d9e02f95f4285bd5eece46641
-
SSDEEP
1536:+RC+SyLPPBUTqTySZwML0/+4BFNSAl1CPcVWfTXbBegnvBWM+5lZFkOU6O25whZ:qSKhUTQaBFNBwcVWfDbfnvu5lZFnUtr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 174b8766bba62e9cc6cf852390b09685_JaffaCakes118
Files
-
174b8766bba62e9cc6cf852390b09685_JaffaCakes118.exe windows:4 windows x86 arch:x86
1587be985ecce39d6a4803ecdeca415b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
ExitProcess
GetACP
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetStartupInfoA
GetUserDefaultLCID
GetVersionExA
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
InitializeCriticalSection
LocalFree
MultiByteToWideChar
RtlUnwind
SearchPathA
SetLastError
SetUnhandledExceptionFilter
WaitForMultipleObjects
lstrcatA
lstrcmpiA
lstrcpyA
user32
WindowFromPoint
TranslateAcceleratorA
PostQuitMessage
GetUpdateRgn
GetDlgCtrlID
GetCursorPos
EmptyClipboard
CreateDialogParamA
ole32
CoCreateGuid
CoCreateInstance
StringFromGUID2
CLSIDFromString
CoTaskMemFree
advapi32
LsaClearAuditLog
SetNamedSecurityInfoExW
LsaQueryDomainInformationPolicy
GetTrusteeFormA
olepro32
OleLoadPicture
Sections
.text Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ