Static task
static1
Behavioral task
behavioral1
Sample
a8c108f3dd3c13cc33ffa341e52cc690_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a8c108f3dd3c13cc33ffa341e52cc690_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
a8c108f3dd3c13cc33ffa341e52cc690_JaffaCakes118
-
Size
97KB
-
MD5
a8c108f3dd3c13cc33ffa341e52cc690
-
SHA1
6294908f58620e674a195fe701944be13082f38e
-
SHA256
dec2e810f4a8868af10eed1006feb162df64001a9a931b6c2f9fe6025872663a
-
SHA512
62a500da37a721fcc09d3ed28ded30115f3c72449185b9fa1103b7d08cba8ff30a6cf7300a124bc11db88c215c71c3beaad396a3c5cd0805a80102484d878322
-
SSDEEP
1536:wNiXEfOVVuw84+ClCiZy/e8JRioEsZumNfScQglvi8Es5CoWm2S2W3wQdAIK7NQ0:wNiESV7nBlC3Jg4lv5CarwQdAIKBQH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8c108f3dd3c13cc33ffa341e52cc690_JaffaCakes118
Files
-
a8c108f3dd3c13cc33ffa341e52cc690_JaffaCakes118.exe windows:5 windows x86 arch:x86
83bbf982a287ef2de0b9f4ec4dbf56b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
memmove
?terminate@@YAXXZ
vswprintf
__RTDynamicCast
wcscmp
__dllonexit
_wcsicmp
wcsrchr
_adjust_fdiv
??3@YAXPAX@Z
wcsstr
_except_handler3
??2@YAPAXI@Z
??1type_info@@UAE@XZ
free
_purecall
mbstowcs
_wcsupr
wcslen
wcschr
wcscpy
malloc
wcstoul
_onexit
wcscat
advapi32
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
user32
MessageBoxW
EnableWindow
SendDlgItemMessageW
WinHelpW
GetDlgItem
LoadImageW
SetCursor
wsprintfW
PostMessageW
DialogBoxParamW
LoadIconW
EndDialog
LoadStringW
ReleaseDC
SetWindowTextW
InsertMenuItemW
SetWindowLongW
SetFocus
LoadBitmapW
SendMessageW
GetParent
LoadCursorW
GetWindowLongW
GetDC
SystemParametersInfoW
GetDlgItemTextA
RegisterClipboardFormatW
SetDlgItemTextW
kernel32
GetDateFormatW
lstrcpyW
GetModuleHandleA
CloseHandle
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LoadLibraryW
InterlockedDecrement
WideCharToMultiByte
FormatMessageW
FileTimeToLocalFileTime
GlobalFree
GetSystemTimeAsFileTime
GetStartupInfoA
GetCurrentProcess
GlobalAlloc
GetSystemWindowsDirectoryW
RemoveDirectoryA
GlobalUnlock
GetSystemDefaultLangID
OutputDebugStringA
SetLastError
GetComputerNameW
GlobalLock
GetACP
DeleteCriticalSection
IsBadReadPtr
GetLastError
LocalFree
lstrlenW
InterlockedIncrement
QueryPerformanceCounter
GetTickCount
OutputDebugStringW
FileTimeToSystemTime
InitializeCriticalSection
GetModuleFileNameW
LocalReAlloc
lstrcmpiW
CreateFileW
certcli
CAGetCertTypeFlags
CAFreeCertTypeProperty
CACertTypeSetSecurity
CAGetCertTypeExtensions
CAGetCertTypePropertyEx
CAFindCertTypeByName
CAEnumCertTypesForCA
CACloseCA
CAUpdateCertType
CACertTypeGetSecurity
CAEnumNextCertType
CASetCertTypeExtension
CAFreeCertTypeExtensions
CASetCertTypeProperty
CACloseCertType
CASetCertTypeKeySpec
CASetCertTypeFlags
CAGetCAProperty
CAUpdateCA
CAFindByName
CAEnumCertTypes
CACreateCertType
CAGetCertTypeProperty
CAFreeCAProperty
CARemoveCACertificateType
CAGetCertTypeKeySpec
CAAddCACertificateType
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ