Static task
static1
Behavioral task
behavioral1
Sample
38855631fcceb02f9b18881510837226_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
38855631fcceb02f9b18881510837226_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38855631fcceb02f9b18881510837226_JaffaCakes118
-
Size
188KB
-
MD5
38855631fcceb02f9b18881510837226
-
SHA1
1006b38e11a620171bd2ec64cf22d23c87ea7559
-
SHA256
c08cfaab28e52c4022b76f61f77bc6ba675f21daa1563072a52ba138e770f5d7
-
SHA512
a015b88f4cfa8b883042dad0e92a9c0ec8027475f85209dfdd4f10b031110662e4f950b43b87092f4aec026c102f310e2c2aa6af5cacef4c0af32b5022daa57b
-
SSDEEP
3072:QLYCxDGxoKTRrqevn8gfj+W6FxWtNpFcoJghKUv/Q2tKqIMaqAb:QLHDgo6q0N6T6TMv/QaCq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38855631fcceb02f9b18881510837226_JaffaCakes118
Files
-
38855631fcceb02f9b18881510837226_JaffaCakes118.exe windows:4 windows x86 arch:x86
a849e7ec4e408bbe464ee31dd550e5b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
comdlg32
FindTextA
GetSaveFileNameA
GetFileTitleA
ChooseColorA
GetOpenFileNameA
user32
CharUpperBuffA
GetKeyboardLayout
kernel32
VirtualAlloc
VirtualAllocEx
LoadLibraryA
LocalAlloc
GetModuleHandleA
GetCommandLineW
GetProcAddress
IsBadReadPtr
lstrlenA
GetVersionExA
ExitProcess
ole32
CreateStreamOnHGlobal
advapi32
RegEnumKeyA
GetUserNameA
RegOpenKeyA
shlwapi
SHSetValueA
SHEnumValueA
SHDeleteKeyA
PathGetCharTypeA
SHQueryInfoKeyA
SHStrDupA
PathIsDirectoryA
SHDeleteValueA
gdi32
SaveDC
CopyEnhMetaFileA
CreatePenIndirect
GetDCOrgEx
SetBkMode
BitBlt
GetRgnBox
CreateCompatibleBitmap
msvcrt
exp
strncmp
swprintf
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES74 Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES42 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES08 Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES89 Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES61 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES34 Size: 1024B - Virtual size: 603B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES13 Size: 1024B - Virtual size: 718B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES90 Size: 1024B - Virtual size: 873B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ