Static task
static1
Behavioral task
behavioral1
Sample
566328ee23c1bfbe99789a77a60ab243_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
566328ee23c1bfbe99789a77a60ab243_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
566328ee23c1bfbe99789a77a60ab243_JaffaCakes118
-
Size
160KB
-
MD5
566328ee23c1bfbe99789a77a60ab243
-
SHA1
60b69490363ec846f50552789bb2b115addcad8f
-
SHA256
affb010970108ca068b67e318ddec942a58e954469f7f27ba6b022eefdc36a77
-
SHA512
d928dc55e9bc9dab3a510e348d477e0bf41464e5df1ff5e45eff7aec0dd3ca16a11ca0e4f0b3c4d944689ea2c4888fffd5478b03376b69c761c66606ebb7d9ce
-
SSDEEP
3072:X07lVxr17Io1wjk8fn5esdHRmGoIItZ4LCzF6BxPE20tx:AlB7IWAn5JYrz6W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 566328ee23c1bfbe99789a77a60ab243_JaffaCakes118
Files
-
566328ee23c1bfbe99789a77a60ab243_JaffaCakes118.exe windows:4 windows x86 arch:x86
8ae1a3ba5090af00d60f5ec5f1780ad7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
ReleaseStgMedium
CoUninitialize
CLSIDFromString
GetHGlobalFromStream
CoRegisterClassObject
advapi32
RegQueryValueA
RegQueryInfoKeyA
GetUserNameA
RegDeleteValueA
user32
SetTimer
GetScrollPos
SetFocus
GetWindowRect
RegisterWindowMessageA
IsChild
CreateIcon
GetDC
GetPropA
GetMenu
DestroyCursor
GetKeyNameTextA
IsRectEmpty
GetForegroundWindow
DestroyIcon
EnumThreadWindows
ChildWindowFromPoint
DrawMenuBar
IntersectRect
IsDialogMessageA
SendMessageA
DefFrameProcA
MessageBoxA
IsWindowUnicode
SetClipboardData
IsWindow
ScreenToClient
SetWindowTextA
GetCapture
shell32
SHFileOperationA
SHGetFolderPathA
Shell_NotifyIconA
oleaut32
SafeArrayUnaccessData
SafeArrayPtrOfIndex
GetErrorInfo
VariantCopyInd
SysAllocStringLen
RegisterTypeLib
SafeArrayCreate
OleLoadPicture
SafeArrayGetElement
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
comctl32
ImageList_Create
ImageList_Read
ImageList_DragShowNolock
gdi32
RestoreDC
kernel32
ExitThread
GetProcAddress
GetVersionExA
SetLastError
GetModuleHandleA
GetDateFormatA
GetCurrentProcessId
VirtualAlloc
LocalAlloc
lstrlenA
GetEnvironmentStrings
comdlg32
ChooseColorA
GetFileTitleA
GetOpenFileNameA
FindTextA
shlwapi
SHDeleteValueA
SHStrDupA
PathFileExistsA
SHQueryValueExA
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.edata Size: 1024B - Virtual size: 548B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 1KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 557B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE