Static task
static1
Behavioral task
behavioral1
Sample
db54baf2c11962e596ce3bdced32e602_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db54baf2c11962e596ce3bdced32e602_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
db54baf2c11962e596ce3bdced32e602_JaffaCakes118
-
Size
100KB
-
MD5
db54baf2c11962e596ce3bdced32e602
-
SHA1
3985b129e2d82070c576d5d166153fe32188a9b9
-
SHA256
217ce333bd21b96aeb2437346bfeb74d91c32bbc5dc9b77afd67fec1458eb362
-
SHA512
540ea3001975bd30a02a8a74833ac8ada6c61c433fed89f55078c061cacbe50ae8493f8387f05da192fde60774703104c266301b3044ffca06d656fb86138f94
-
SSDEEP
3072:dPr9YKeGQiDDrI5RVYQ4n0AHmgAZs/Wi84y:dJVTDfI5RyQ4n0AHxAZsn3y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db54baf2c11962e596ce3bdced32e602_JaffaCakes118
Files
-
db54baf2c11962e596ce3bdced32e602_JaffaCakes118.exe windows:5 windows x86 arch:x86
adfb9d01cbcaec8ff444a099dcb93d78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClipboardFormatW
LoadIconW
WinHelpW
SetWindowTextW
SystemParametersInfoW
LoadStringW
SendMessageW
GetWindowLongW
GetDC
SetCursor
MessageBoxW
LoadCursorW
ReleaseDC
GetParent
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
LoadImageW
PostMessageW
DialogBoxParamW
GetDlgItemTextA
InsertMenuItemW
SetFocus
SetWindowLongW
wsprintfW
LoadBitmapW
EnableWindow
EndDialog
kernel32
LocalReAlloc
CloseHandle
GetSystemWindowsDirectoryW
lstrcmpiW
IsBadReadPtr
InterlockedDecrement
GetEnvironmentStringsW
GetComputerNameW
lstrlenW
CreateFileW
LocalFree
GetTickCount
lstrcpyW
GetLastError
GetProcAddress
SetLastError
InitializeCriticalSection
GetModuleFileNameW
GetCurrentThread
FormatMessageW
OutputDebugStringA
InterlockedIncrement
GetCPInfo
OutputDebugStringW
GetCurrentProcess
WideCharToMultiByte
GetSystemTimeAsFileTime
GetModuleHandleA
GlobalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetStartupInfoA
SetUnhandledExceptionFilter
GetDateFormatW
GlobalUnlock
LoadLibraryW
DeleteCriticalSection
GetSystemDefaultLangID
GlobalAlloc
QueryPerformanceCounter
GlobalLock
certcli
CAUpdateCA
CAGetCertTypeExtensions
CACertTypeGetSecurity
CAFindCertTypeByName
CASetCertTypeProperty
CAFreeCertTypeExtensions
CAGetCAProperty
CAGetCertTypePropertyEx
CAFreeCAProperty
CAFreeCertTypeProperty
CAEnumCertTypes
CAGetCertTypeFlags
CARemoveCACertificateType
CACreateCertType
CASetCertTypeExtension
CASetCertTypeFlags
CAFindByName
CACertTypeSetSecurity
CAEnumCertTypesForCA
CACloseCA
CACloseCertType
CAGetCertTypeKeySpec
CAAddCACertificateType
CAEnumNextCertType
CASetCertTypeKeySpec
CAUpdateCertType
CAGetCertTypeProperty
msvcrt
memmove
??2@YAPAXI@Z
wcscpy
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
wcschr
vswprintf
wcslen
wcstoul
_wcsicmp
_except_handler3
mbstowcs
malloc
wcscat
free
_adjust_fdiv
_initterm
_wcsupr
wcsstr
__RTDynamicCast
??3@YAXPAX@Z
wcsrchr
wcscmp
advapi32
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegDeleteValueW
comctl32
CreatePropertySheetPageW
PropertySheetW
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ