Static task
static1
Behavioral task
behavioral1
Sample
56df73363c8b792e7660ae794f817e2b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
56df73363c8b792e7660ae794f817e2b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56df73363c8b792e7660ae794f817e2b_JaffaCakes118
-
Size
264KB
-
MD5
56df73363c8b792e7660ae794f817e2b
-
SHA1
3d7eab90cad44b02bcfd5957aec22c34bc75ced8
-
SHA256
7b23ebcbf7bf6bbb3c159fe72d95d56ab2bc07346410303df3db5e00593889e3
-
SHA512
22a5bbdf870e2e1e64d3d16af05fa9bbc2588fe3a8596dd0ad1b570c81166572392581583ea55f9c438750d646871df2aa40ddb36184113f8cc1695a80963826
-
SSDEEP
6144:4pV/sq00J16qJcqgrKB9ar4Pn3gGlytOVcjOmCPULwzi:+V/XvJ1ncqWK3arqnw0y+q5CsLwz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56df73363c8b792e7660ae794f817e2b_JaffaCakes118
Files
-
56df73363c8b792e7660ae794f817e2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
309fe7ecda20ab7eab51ab83e357e8d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetKeySecurity
RegQueryInfoKeyW
LookupPrivilegeValueW
SetNamedSecurityInfoW
RegSetValueA
GetLengthSid
RegQueryValueExW
OpenProcessToken
ChangeServiceConfig2W
RegEnumKeyW
CryptGetHashParam
ChangeServiceConfigW
ole32
OleRegGetUserType
CoTreatAsClass
ProgIDFromCLSID
WriteClassStm
StringFromCLSID
StgOpenStorageOnILockBytes
WriteClassStg
RegisterDragDrop
comctl32
CreateToolbarEx
ImageList_LoadImageW
kernel32
HeapAlloc
VirtualAlloc
GetCommandLineA
GetDateFormatA
OpenFileMappingA
GetDiskFreeSpaceExW
FindResourceExA
LocalFileTimeToFileTime
GetCurrentThreadId
WritePrivateProfileStringW
GetCurrentProcessId
InterlockedDecrement
EnumCalendarInfoA
IsBadReadPtr
CreateMutexA
LockFile
GlobalFlags
GlobalAlloc
FreeLibrary
IsBadWritePtr
EnumResourceLanguagesW
GetPriorityClass
EnumSystemLocalesA
SwitchToThread
GlobalFindAtomA
SetFilePointerEx
LoadLibraryW
UnhandledExceptionFilter
FindClose
GetVolumeInformationW
GetSystemInfo
EnumResourceNamesW
GetSystemTimeAsFileTime
GetPrivateProfileStringA
OpenMutexA
GetCommandLineW
GetFileInformationByHandle
GetOverlappedResult
HeapSize
GetWindowsDirectoryW
GetUserDefaultUILanguage
GetLongPathNameW
GetModuleHandleW
DeviceIoControl
GlobalAddAtomW
ReadFile
GetPrivateProfileIntW
Beep
SizeofResource
GlobalFree
CopyFileW
GetStartupInfoW
OpenEventA
GetProcAddress
CreateNamedPipeA
CompareStringA
CloseHandle
lstrcatA
SetFilePointer
SetStdHandle
LCMapStringA
GetFileAttributesA
GetTempFileNameW
CreateFileW
GetCurrentDirectoryA
EnterCriticalSection
LoadResource
OpenFile
LoadLibraryExA
CompareFileTime
FindNextChangeNotification
CreateDirectoryA
FormatMessageA
SetThreadExecutionState
GlobalUnlock
WritePrivateProfileSectionA
GetStartupInfoA
lstrlenA
IsDBCSLeadByteEx
GetModuleFileNameA
GetModuleHandleA
GetVersion
ExitProcess
RtlUnwind
GetLastError
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
HeapReAlloc
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LoadLibraryA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
oleaut32
SysStringLen
user32
ReuseDDElParam
AppendMenuA
GetDlgItem
GetClientRect
ShowCaret
ShowCursor
GetMenuCheckMarkDimensions
FindWindowExW
GetScrollPos
ReleaseCapture
DdeCreateStringHandleW
InvertRect
TrackMouseEvent
DrawTextA
GetWindowWord
DestroyCursor
GetCaretBlinkTime
GetWindowTextLengthW
ScrollWindowEx
SetWindowLongW
SetMenuItemInfoA
PostMessageW
CharUpperBuffA
RegisterClassExA
GetWindow
SetScrollInfo
CallWindowProcA
SetMenu
GrayStringW
GrayStringA
PtInRect
DestroyIcon
GetDlgCtrlID
RedrawWindow
GetClassNameA
GetMessagePos
GetClipboardData
InflateRect
ReleaseDC
ActivateKeyboardLayout
FlashWindowEx
CharLowerBuffA
ChildWindowFromPoint
shell32
SHBrowseForFolderW
ShellExecuteExW
comdlg32
GetSaveFileNameA
shlwapi
PathRemoveExtensionW
gdi32
SetMapMode
AddFontResourceA
Sections
.text Size: 216KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ