Static task
static1
Behavioral task
behavioral1
Sample
261bff7105f43a5aac3e35f659cebc99_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
261bff7105f43a5aac3e35f659cebc99_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
261bff7105f43a5aac3e35f659cebc99_JaffaCakes118
-
Size
372KB
-
MD5
261bff7105f43a5aac3e35f659cebc99
-
SHA1
34939ac589c5455bd0355f392dcef7a2f4b9feb7
-
SHA256
0227995acc3f9d30eb6fc7ce2960dcf9bd207c7a872a4e34c5f9925e4dcc7022
-
SHA512
210d08ee29a62d0a78105162b9d69a60beb30672c60fb67613afcfb9bad3c11202bf834d5b81a593441660de7236c57d7ae66cedb6029a3be6ee29c89464277d
-
SSDEEP
6144:lDgXowhrK2lOYDIwVSUpmaJjF18S3lhxbJj2cop655JsXpFVwTbNPLL/NDdby549:lDuBm2kYDIopmaJhGStoAe/VwTpPHFDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261bff7105f43a5aac3e35f659cebc99_JaffaCakes118
Files
-
261bff7105f43a5aac3e35f659cebc99_JaffaCakes118.exe windows:4 windows x86 arch:x86
1dc94521d4fea116e1a4083468383b84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragShowNolock
ImageList_Remove
ImageList_DrawEx
ImageList_Destroy
ImageList_Read
ImageList_Add
ImageList_Create
ImageList_Write
ole32
WriteClassStm
GetHGlobalFromStream
OleRegGetUserType
StgCreateDocfileOnILockBytes
CoGetObjectContext
CoRevokeClassObject
kernel32
GetModuleHandleW
GetOEMCP
VirtualAlloc
GetModuleHandleA
LoadLibraryExA
lstrlenW
IsBadHugeReadPtr
VirtualAllocEx
LocalAlloc
GetProcAddress
GetCommandLineA
ExitProcess
GetLastError
IsBadReadPtr
msvcrt
strcmp
sprintf
tolower
wcscspn
exit
Sections
CODE Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 878B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ