Static task
static1
Behavioral task
behavioral1
Sample
707d00c0412d7935f9ae5cd878207e67_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
707d00c0412d7935f9ae5cd878207e67_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
707d00c0412d7935f9ae5cd878207e67_JaffaCakes118
-
Size
102KB
-
MD5
707d00c0412d7935f9ae5cd878207e67
-
SHA1
ab60662fa1f53e19c3ba7682862bd03d0e68ebf1
-
SHA256
f9c1d21f1f14c58ef900425490af29a6465ef4378d36f139868f20593304cdf9
-
SHA512
6d8c02ed51ce2e7d7ea97541396bb8936a0effd5651353becf876db2b507f866d89e4b54ff587100dee53df71a12c2bf23c364654df2f628ee21f687d2906d00
-
SSDEEP
1536:FNSeP3pKoqFHok3CB3JcM2aG4b6WivIaJQh11PSpH6F+CWfDko9QgZcJ4i:a63gddbC9HuhQaJQ7126FikjwcJj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 707d00c0412d7935f9ae5cd878207e67_JaffaCakes118
Files
-
707d00c0412d7935f9ae5cd878207e67_JaffaCakes118.exe windows:5 windows x86 arch:x86
81c974f7b000e894dc5aaf008db36323
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
certcli
CAGetCertTypeExtensions
CAEnumCertTypes
CAGetCertTypeProperty
CAUpdateCertType
CAGetCertTypeKeySpec
CAFindCertTypeByName
CACloseCA
CAFreeCertTypeExtensions
CAFreeCertTypeProperty
CASetCertTypeExtension
CAAddCACertificateType
CASetCertTypeProperty
CAGetCAProperty
CACertTypeGetSecurity
CAEnumCertTypesForCA
CASetCertTypeKeySpec
CACloseCertType
CAFindByName
CASetCertTypeFlags
CAFreeCAProperty
CAEnumNextCertType
CARemoveCACertificateType
CAGetCertTypePropertyEx
CACreateCertType
CAUpdateCA
CAGetCertTypeFlags
CACertTypeSetSecurity
msvcrt
memmove
wcscpy
free
??3@YAXPAX@Z
vswprintf
wcsstr
_initterm
_wcsicmp
wcsrchr
_onexit
wcscmp
malloc
wcschr
wcslen
_wcsupr
_adjust_fdiv
wcstoul
__dllonexit
_except_handler3
??1type_info@@UAE@XZ
__RTDynamicCast
wcscat
??2@YAPAXI@Z
?terminate@@YAXXZ
mbstowcs
kernel32
InitializeCriticalSection
GetLastError
SetUnhandledExceptionFilter
InterlockedIncrement
LocalReAlloc
OutputDebugStringA
OutputDebugStringW
WideCharToMultiByte
GetComputerNameW
GlobalFree
GetProcAddress
FormatMessageW
GetModuleFileNameW
lstrcpyW
GetDateFormatW
lstrcmpiW
GetSystemWindowsDirectoryW
GetTickCount
GetModuleHandleA
GetStartupInfoA
GlobalLock
GetCurrentProcess
GetSystemTimeAsFileTime
CreateFileW
GlobalAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
QueryPerformanceCounter
SetLastError
LoadLibraryW
RemoveDirectoryA
GetEnvironmentStringsW
InterlockedDecrement
CloseHandle
GetCPInfo
DeleteCriticalSection
IsBadReadPtr
GetSystemDefaultLangID
lstrlenW
LocalFree
GlobalUnlock
user32
SetWindowLongW
LoadImageW
EnableWindow
GetWindowLongW
WinHelpW
SendMessageW
SetDlgItemTextW
RegisterClipboardFormatW
LoadBitmapW
GetParent
LoadStringW
EndDialog
SendDlgItemMessageW
GetDC
SetCursor
PostMessageW
GetDlgItemTextA
InsertMenuItemW
GetDlgItem
ReleaseDC
SetWindowTextW
LoadIconW
wsprintfW
SetFocus
LoadCursorW
DialogBoxParamW
MessageBoxW
SystemParametersInfoW
comctl32
PropertySheetW
CreatePropertySheetPageW
advapi32
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ