Static task
static1
Behavioral task
behavioral1
Sample
391b1ed37aa56fd4d7c11589a1a78e9c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
391b1ed37aa56fd4d7c11589a1a78e9c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
391b1ed37aa56fd4d7c11589a1a78e9c_JaffaCakes118
-
Size
100KB
-
MD5
391b1ed37aa56fd4d7c11589a1a78e9c
-
SHA1
113b29913357fb5ce2dbd9d91c5e45a4f3c86b4a
-
SHA256
6fca0270cfebc0e477008013f848f04be6c32321a027ab5f8d590362eea42367
-
SHA512
e92ff0e79a73c555faef6efaae9dd11d3898886902ae61cd8e1c4e23b95f132c9eeb86c2d9d33a686b8604793925b963a796fa342b18a33b11174acef8097c79
-
SSDEEP
1536:lAk54XeAKVi7ZgZIyJ3uUAP+GeG+LcJ6TT9il57PkrXA:lAk5Fi7LyJevP+5LckTT9i3Iw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 391b1ed37aa56fd4d7c11589a1a78e9c_JaffaCakes118
Files
-
391b1ed37aa56fd4d7c11589a1a78e9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
27b75c18e9ae3b44e8a4d645017c9538
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
lstrcmpi
FlushFileBuffers
GetLocaleInfoA
GetProfileIntA
GetDiskFreeSpaceExW
gdi32
LPtoDP
StretchBlt
CreateDCA
Rectangle
SetStretchBltMode
ExtEscape
EnumFontFamiliesA
GetTextAlign
GetWindowOrgEx
DPtoLP
CreateCompatibleDC
IntersectClipRect
GetObjectA
GetTextCharsetInfo
GetPixel
SelectClipRgn
CreateFontW
ResizePalette
CreateDCW
GdiFlush
GetObjectType
SetDIBColorTable
Polyline
CreateFontA
CreateDIBPatternBrushPt
GetTextExtentPoint32W
CreateSolidBrush
CreatePenIndirect
CreateCompatibleBitmap
CreateFontIndirectW
SelectPalette
CreateBitmap
SetROP2
SetPolyFillMode
DeleteObject
MoveToEx
GetStockObject
DeleteDC
SetMapMode
GetTextMetricsA
RestoreDC
GetBrushOrgEx
CombineRgn
EnumFontFamiliesExW
Polygon
GetObjectW
CreateEllipticRgn
TextOutA
CreateDIBSection
SetBkColor
GetCharWidthA
GetClipBox
GetDeviceCaps
SetPixelV
OffsetRgn
CreateICA
GetBkColor
GetTextExtentPoint32A
SetViewportOrgEx
CreateRoundRectRgn
SaveDC
GetSystemPaletteEntries
SetBkMode
SetViewportExtEx
GetDIBColorTable
CreatePen
SetTextAlign
GetRgnBox
GetTextFaceA
SetWinMetaFileBits
GetNearestPaletteIndex
ExtCreateRegion
GetTextColor
RectVisible
advapi32
QueryServiceConfigW
RegConnectRegistryA
LookupAccountNameW
RegSetValueExA
RegisterEventSourceA
InitializeSid
RegCreateKeyA
CreateServiceW
LookupPrivilegeValueW
QueryServiceStatus
GetSidIdentifierAuthority
SetSecurityDescriptorOwner
SetEntriesInAclW
ChangeServiceConfigW
RegCreateKeyExA
LsaQueryInformationPolicy
RegQueryInfoKeyW
GetAce
DeleteService
SetFileSecurityA
RegCreateKeyExW
RegQueryValueA
InitializeSecurityDescriptor
GetSidSubAuthorityCount
GetKernelObjectSecurity
MakeAbsoluteSD
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ