Static task
static1
Behavioral task
behavioral1
Sample
56f268a9d704a7b7ba84aa9ae5d41731_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
56f268a9d704a7b7ba84aa9ae5d41731_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
56f268a9d704a7b7ba84aa9ae5d41731_JaffaCakes118
-
Size
275KB
-
MD5
56f268a9d704a7b7ba84aa9ae5d41731
-
SHA1
9e4d9e0fcd27ac141917fb386315f7f498ca6110
-
SHA256
f6f96a1aa0d53d72974ee6ab2dd20c968162dd4f628e53ad91e7d1531d5d0704
-
SHA512
6064b5e4c3a26d509ea2fc5ef8815d54848998843a2bb1e0b1edf6b71be9bb4785a491973ab9346efea4a41615edf28ce59058e9d0c53ab68c7474f8fcf83fa8
-
SSDEEP
6144:kB9RSRcn9YiuRk6Dz1noj+nMwZrBTHjX0BHAaHQrXKoXkOg1Pfn7s:wj9Yie1nWbwZFrjX0xAacX/if7s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 56f268a9d704a7b7ba84aa9ae5d41731_JaffaCakes118
Files
-
56f268a9d704a7b7ba84aa9ae5d41731_JaffaCakes118.exe windows:4 windows x86 arch:x86
04bd53bbc8825703023ef80b9b00dd30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TileWindows
IsWindowUnicode
GetClipboardData
SetClipboardData
GetSysColor
GetWindowTextLengthA
GetLastActivePopup
GetWindow
GetDlgItem
GetDialogBaseUnits
MessageBoxExA
GetDlgItemTextA
ole32
OleInitialize
GetRunningObjectTable
CoFileTimeNow
CoFreeUnusedLibraries
OleLoadFromStream
CoInstall
ReadFmtUserTypeStg
GetHGlobalFromILockBytes
GetHGlobalFromStream
CoGetClassObject
MonikerRelativePathTo
OleCreateLinkToFile
StringFromGUID2
CreateClassMoniker
OleCreateMenuDescriptor
OleSave
OleCreateLinkToFileEx
gdi32
GetStockObject
kernel32
GetCommandLineA
ResumeThread
VirtualAlloc
GetLastError
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
FreeEnvironmentStringsA
GlobalLock
GetProcAddress
IsValidLocale
DeleteCriticalSection
VirtualAllocEx
OpenEventA
LCMapStringA
GetCurrencyFormatA
VirtualLock
GetModuleHandleA
GlobalHandle
GlobalAlloc
GetOverlappedResult
InitializeCriticalSection
ReleaseMutex
IsBadReadPtr
msvcrt
__p__commode
_controlfp
_except_handler3
__set_app_type
__p__fmode
_exit
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 277KB - Virtual size: 378KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ