Static task
static1
Behavioral task
behavioral1
Sample
536b4bacbe99e40194fa9ee7d30655b7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
536b4bacbe99e40194fa9ee7d30655b7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
536b4bacbe99e40194fa9ee7d30655b7_JaffaCakes118
-
Size
316KB
-
MD5
536b4bacbe99e40194fa9ee7d30655b7
-
SHA1
f319550d263d13b63355243be3c4217ee727bf3c
-
SHA256
c9ee28505c30cc408826d871c13ede3e7c1998e927e78bf52aa8378615b398cc
-
SHA512
b2281a7899bde993df0b7d843c059814f128b11787df649e83db00387b83cf6446119fcfe3f923ae60469eced519e43fabcf7743e3103d8822491947bb928e57
-
SSDEEP
6144:0mirOgsyX2JaOVT8yXGa9DDMrWVtjPlQdEBqL05j7lFkx:WKw6VsqnVfQdEA24
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 536b4bacbe99e40194fa9ee7d30655b7_JaffaCakes118
Files
-
536b4bacbe99e40194fa9ee7d30655b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
b42afd43c4a468e86e4138d436042a06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memcmp
strcmp
memmove
wcsncmp
strlen
wcscspn
asin
shell32
SHGetSpecialFolderLocation
SHFileOperationA
Shell_NotifyIconA
DragQueryFileA
version
VerQueryValueA
VerInstallFileA
GetFileVersionInfoSizeA
kernel32
SetFilePointer
GetCommandLineA
SetErrorMode
LocalAlloc
lstrlenA
SetEvent
SetHandleCount
GetModuleHandleW
ExitProcess
SetEndOfFile
LoadLibraryA
GetLastError
GetOEMCP
LoadLibraryExA
GetProcAddress
GetModuleHandleA
IsBadReadPtr
ResetEvent
VirtualAllocEx
GetACP
ReadFile
gdi32
SetBkMode
SetTextColor
SaveDC
LineTo
CreateCompatibleBitmap
CreateDIBitmap
GetPaletteEntries
GetClipBox
CreateDIBSection
GetDIBColorTable
advapi32
RegOpenKeyA
RegDeleteValueA
ole32
CoRevokeClassObject
comdlg32
FindTextA
Sections
CODE Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 236KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ