Static task
static1
Behavioral task
behavioral1
Sample
d61c9b8e17d0cc069c4b60999b812c81_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d61c9b8e17d0cc069c4b60999b812c81_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
d61c9b8e17d0cc069c4b60999b812c81_JaffaCakes118
-
Size
208KB
-
MD5
d61c9b8e17d0cc069c4b60999b812c81
-
SHA1
4a47a01ea65f6a50ad68eaa3413bc8a5523d5dc7
-
SHA256
b578123863060b0f17c6773b6deb5467c17e1b6c04f7ffc4e33f45a499030adf
-
SHA512
797f7aa227219f647f34746af9565c18026f18792df51c3486713edc23aca8874fe24c330d162a07d7c43a2466f8e83281733fe266340b53135c95b5e9b3334e
-
SSDEEP
3072:qsIbkttKFHyFeKLUVGGKusRLsLHahgKNJXtnuwrcemxkr186pGJ6PIsjCuuj2HyV:FViHue/DJELSa3HtnuwXkXAijGbjl8V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d61c9b8e17d0cc069c4b60999b812c81_JaffaCakes118
Files
-
d61c9b8e17d0cc069c4b60999b812c81_JaffaCakes118.exe windows:4 windows x86 arch:x86
386e17f39a7101ae57059a54a838d7e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
rpcrt4
NdrClientCall
RpcStringBindingComposeA
RpcBindingFromStringBindingA
RpcBindingSetAuthInfoA
RpcStringFreeA
comdlg32
GetFileTitleA
ole32
CoFreeUnusedLibraries
OleRun
ProgIDFromCLSID
OleDuplicateData
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
CoGetClassObject
RegisterDragDrop
GetHGlobalFromStream
OleGetAutoConvert
ReleaseStgMedium
CoTaskMemAlloc
CLSIDFromString
RevokeDragDrop
OleRegGetUserType
CLSIDFromProgID
CoCreateInstance
StringFromCLSID
CoGetMalloc
CoTaskMemFree
CoCreateGuid
CreateILockBytesOnHGlobal
user32
UnhookWindowsHookEx
SetClipboardData
DestroyCursor
SetWindowPos
MonitorFromWindow
ClipCursor
CallNextHookEx
ChildWindowFromPoint
DefWindowProcW
DrawEdge
GetSysColorBrush
RegisterClassW
ToAscii
DestroyIcon
SetScrollRange
EmptyClipboard
SetWindowsHookExW
WinHelpW
IsClipboardFormatAvailable
GetSysColor
comctl32
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Create
ImageList_Add
ImageList_Destroy
kernel32
GetUserDefaultLangID
CreateFiber
LocalAlloc
VerLanguageNameW
GetVersionExW
WriteFileGather
UnlockFile
SetEndOfFile
FileTimeToLocalFileTime
GetFileTime
EnumResourceNamesW
GetFileAttributesA
GetFileType
FileTimeToSystemTime
FindResourceExA
FlushFileBuffers
LockFile
GetProfileStringW
GetSystemTime
FlushFileBuffers
IsDBCSLeadByte
CompareStringW
SearchPathW
GetVolumeInformationW
GetSystemDirectoryW
shlwapi
PathIsRootW
PathStripToRootW
PathIsRelativeW
PathIsURLW
PathCanonicalizeW
PathCombineW
Sections
.text Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lib Size: 512B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ