Static task
static1
Behavioral task
behavioral1
Sample
ad85d758f188963607bb5c610ac9f1c2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ad85d758f188963607bb5c610ac9f1c2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
ad85d758f188963607bb5c610ac9f1c2_JaffaCakes118
-
Size
100KB
-
MD5
ad85d758f188963607bb5c610ac9f1c2
-
SHA1
b67fe929658b06bc7708f0ca193bbe7c8ca6e45f
-
SHA256
6121bef17bf9d73e63029d83e2571765d53ba33c4bc377c44629e63d9f563327
-
SHA512
12415bf47aeeb9fee9965d0eaeb0b4f243ef1406c0db12c6162ec72b47d982fd327b56e8217e903d7a3f496518d859335f83a0e87a6a0792f6fd025afc2675c2
-
SSDEEP
1536:MiqZu32INz0TXreQeJZiHJnDjoGapnUev3MAErVVE9/X8g2Ez1T7:Vn31N0fpH5QLn30AErr6/X44
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad85d758f188963607bb5c610ac9f1c2_JaffaCakes118
Files
-
ad85d758f188963607bb5c610ac9f1c2_JaffaCakes118.exe windows:5 windows x86 arch:x86
2413a1ab0a96f37668c53001db5e98c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SystemParametersInfoW
GetDlgItem
InsertMenuItemW
LoadStringW
SendDlgItemMessageW
LoadIconW
MessageBoxW
wsprintfW
EnableWindow
ReleaseDC
DialogBoxParamW
SetCursor
PostMessageW
SetWindowTextW
RegisterClipboardFormatW
LoadCursorW
WinHelpW
GetDlgItemTextA
SetFocus
SetDlgItemTextW
EndDialog
SetWindowLongW
SendMessageW
LoadImageW
GetParent
GetWindowLongW
LoadBitmapW
GetDC
kernel32
GetProcAddress
SetUnhandledExceptionFilter
DeleteCriticalSection
GlobalAlloc
LocalReAlloc
GlobalLock
RemoveDirectoryA
OutputDebugStringW
lstrlenW
GetModuleFileNameW
FileTimeToSystemTime
GetComputerNameW
FileTimeToLocalFileTime
GetStartupInfoA
InitializeCriticalSection
GlobalFree
GetLastError
OutputDebugStringA
GetCurrentProcess
GetSystemWindowsDirectoryW
FormatMessageW
IsBadReadPtr
SetLastError
InterlockedDecrement
LocalFree
GetDateFormatW
InterlockedIncrement
lstrcpyW
GetModuleHandleA
CreateFileW
GetCPInfo
lstrcmpiW
GetTickCount
CloseHandle
GetEnvironmentStringsW
WideCharToMultiByte
GetSystemDefaultLangID
GetSystemTimeAsFileTime
QueryPerformanceCounter
GlobalUnlock
LoadLibraryW
msvcrt
vswprintf
wcscpy
wcscmp
wcscat
mbstowcs
wcstoul
_adjust_fdiv
free
wcslen
_initterm
??1type_info@@UAE@XZ
_wcsupr
_wcsicmp
_except_handler3
__dllonexit
__RTDynamicCast
wcsstr
??2@YAPAXI@Z
wcschr
??3@YAXPAX@Z
?terminate@@YAXXZ
_onexit
wcsrchr
malloc
memmove
certcli
CAFindCertTypeByName
CASetCertTypeFlags
CAUpdateCA
CAFreeCertTypeExtensions
CACertTypeGetSecurity
CAGetCertTypePropertyEx
CAFreeCertTypeProperty
CACreateCertType
CAGetCertTypeExtensions
CASetCertTypeProperty
CASetCertTypeExtension
CAGetCertTypeFlags
CAAddCACertificateType
CAUpdateCertType
CAGetCAProperty
CAEnumCertTypes
CASetCertTypeKeySpec
CAGetCertTypeProperty
CAEnumCertTypesForCA
CAFindByName
CARemoveCACertificateType
CACertTypeSetSecurity
CAEnumNextCertType
CAGetCertTypeKeySpec
CACloseCertType
CAFreeCAProperty
CACloseCA
advapi32
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueExW
RegDeleteValueW
comctl32
PropertySheetW
CreatePropertySheetPageW
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ