Static task
static1
Behavioral task
behavioral1
Sample
7c616854a3677a97b997f8fc193f8f0b_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
7c616854a3677a97b997f8fc193f8f0b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
7c616854a3677a97b997f8fc193f8f0b_JaffaCakes118
-
Size
141KB
-
MD5
7c616854a3677a97b997f8fc193f8f0b
-
SHA1
3139ac2f40430685160faa872b5daae50dd86c07
-
SHA256
9720edbd1836311d4726cce325afb0c3919f2bc4f7665184cb1b7e56ace07581
-
SHA512
165a204cea6f22797774f37bf8790e2bf12ff3134c3ab4dd0932d370b31824f684136e492d43524e027cce87520d2c67f3d2952654d3f751ef83dc2bc9d69b01
-
SSDEEP
3072:Fc1d21pFSSWEaoDo3tYnOZPtHgWn5MH/0pnWD5/nam0nv:+1d21T3O3t7HFn5MH/E+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c616854a3677a97b997f8fc193f8f0b_JaffaCakes118
Files
-
7c616854a3677a97b997f8fc193f8f0b_JaffaCakes118.exe windows:5 windows x86 arch:x86
67e1469bc53427d992ffc6930ac5a6b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetSystemInfo
GetVersionExA
HeapCreate
HeapDestroy
HeapFree
LCMapStringA
LCMapStringW
MultiByteToWideChar
RtlUnwind
GetStringTypeA
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualFree
VirtualProtect
WriteFile
VirtualAllocEx
GetWindowsDirectoryW
GetProcAddress
GetLocaleInfoA
GetFileType
GetCurrentThreadId
ExitProcess
SetHandleCount
DeleteCriticalSection
user32
LookupIconIdFromDirectory
MessageBoxW
PeekMessageW
ReleaseDC
SendDlgItemMessageW
SetCursor
SetDlgItemTextW
SetForegroundWindow
SystemParametersInfoW
LoadIconW
LoadStringW
LoadCursorW
GetSystemMetrics
GetSystemMenu
GetLastActivePopup
GetDlgItem
GetDC
GetClientRect
DispatchMessageW
DestroyWindow
CreateDialogParamW
CopyRect
CharNextW
EnableMenuItem
gdi32
GetStockObject
GetTextExtentPointW
GetTextExtentExPointW
GetDeviceCaps
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHChangeNotify
SHAddToRecentDocs
FindExecutableW
ShellExecuteExW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 730B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ