Static task
static1
Behavioral task
behavioral1
Sample
387c30a855915a271c3add51ffcb51e6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
387c30a855915a271c3add51ffcb51e6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
387c30a855915a271c3add51ffcb51e6_JaffaCakes118
-
Size
165KB
-
MD5
387c30a855915a271c3add51ffcb51e6
-
SHA1
aa0bab4536498f7f3ad99653edb16575be3eb96b
-
SHA256
a867ea8e58b7c5dc76fd3faf47480f1d00566770db14faf7534a4cd321d691b1
-
SHA512
b2c58ca85ecdb2847313485aaaf7fc4925209a18fd4399f38683208317dd956fd6ab625ec342ab47b17a7e1ae47df62c06022239951e0dd478dfd86fd90f26fb
-
SSDEEP
3072:Uj8ZDA1Wj7U+BCtDUGP3esZhcZUdbbG1b26p5ta/X5NYNuC404TcfnlO/L:e8N1GGs0OG26vta/J0JZEG2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387c30a855915a271c3add51ffcb51e6_JaffaCakes118
Files
-
387c30a855915a271c3add51ffcb51e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
500c31c4796ba29a35cbaeed1d849a7f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
comctl32
PropertySheetW
oleacc
LresultFromObject
CreateStdAccessibleObject
ole32
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
CoInitializeEx
CoTaskMemAlloc
CoUninitialize
CoInitialize
kernel32
WriteConsoleInputVDMA
CompareFileTime
GetProcessHandleCount
SearchPathW
EnumResourceNamesA
FreeEnvironmentStringsW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SetFileTime
shlwapi
PathAppendW
PathRemoveFileSpecW
PathCombineW
SHGetValueW
PathFileExistsW
shell32
SHGetFolderPathW
ShellExecuteW
SHFileOperationW
CommandLineToArgvW
ShellExecuteExW
user32
ReleaseDC
IsDlgButtonChecked
PostMessageW
IsWindow
GetDC
GetDlgCtrlID
LoadIconW
SetWindowTextW
GetFocus
GetWindowModuleFileNameW
CreateCursor
DestroyWindow
SetWindowLongW
PostQuitMessage
MsgWaitForMultipleObjects
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ