Static task
static1
Behavioral task
behavioral1
Sample
26bc0eec9c1877acaacf34bb911eb199_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26bc0eec9c1877acaacf34bb911eb199_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26bc0eec9c1877acaacf34bb911eb199_JaffaCakes118
-
Size
99KB
-
MD5
26bc0eec9c1877acaacf34bb911eb199
-
SHA1
67fb64ef10fec8e8aa28821f98b3cb33c49dd298
-
SHA256
92a73681bc753187ddf9fa6eac76fa34c890a53e1f2cd2b4bab303842d13cefa
-
SHA512
1d892df0f7cb0892e262a640e0f2d99c27efdc1788351836105c8f75035c3ce171c643631d5449400b7c92908fc611ab6bb03d7847aa53dc55f37927f04e785f
-
SSDEEP
3072:SU8VqrZy0YCO2rpxehdyyxAp6Eu+TnK2++:rxr3Iyyxk6EVKn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26bc0eec9c1877acaacf34bb911eb199_JaffaCakes118
Files
-
26bc0eec9c1877acaacf34bb911eb199_JaffaCakes118.exe windows:5 windows x86 arch:x86
019a8cc207b3c0aec503525d720bfa42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
calloc
_write
free
__p__environ
_stricmp
__setusermatherr
__p__commode
__getmainargs
__p__fmode
_acmdln
_exit
fclose
__set_app_type
_adjust_fdiv
_except_handler3
fwrite
_initterm
kernel32
FreeLibrary
GetModuleHandleW
DuplicateHandle
GetUserDefaultLangID
lstrcmpiA
WriteFile
SetUnhandledExceptionFilter
lstrcpynA
SetErrorMode
GetCurrentProcess
GetProcAddress
ReadFile
RtlUnwind
lstrlenW
GetStartupInfoA
IsBadReadPtr
GetThreadLocale
LoadLibraryExW
ole32
GetRunningObjectTable
OleDraw
CoRevokeClassObject
CLSIDFromProgID
OleIsCurrentClipboard
CoRegisterClassObject
IIDFromString
RegisterDragDrop
CoGetInterfaceAndReleaseStream
ProgIDFromCLSID
advapi32
GetSecurityDescriptorDacl
InitiateSystemShutdownA
GetLengthSid
RegSetValueExW
RegEnumValueA
EqualSid
RegCreateKeyA
CryptHashData
CryptDestroyHash
OpenServiceA
FreeSid
oleaut32
SafeArrayGetUBound
SafeArrayCreate
GetActiveObject
SetErrorInfo
SysFreeString
SafeArrayRedim
LoadTypeLib
comctl32
ImageList_ReplaceIcon
InitCommonControls
ImageList_DragEnter
CreateToolbarEx
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_GetImageCount
PropertySheetA
CreateStatusWindowA
ImageList_GetImageInfo
gdi32
RealizePalette
TextOutW
GetEnhMetaFileBits
GetObjectA
BeginPath
CreateMetaFileW
GetDIBits
GetPaletteEntries
GetNearestPaletteIndex
EnumMetaFile
GetTextCharsetInfo
GetClipBox
user32
LoadBitmapA
SetFocus
DrawTextA
GetSysColorBrush
CloseClipboard
LoadCursorA
InvalidateRect
LoadStringA
SetTimer
PeekMessageA
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ