Static task
static1
Behavioral task
behavioral1
Sample
0547b53b6a0c551e22be5b53b06289aa_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0547b53b6a0c551e22be5b53b06289aa_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0547b53b6a0c551e22be5b53b06289aa_JaffaCakes118
-
Size
2.5MB
-
MD5
0547b53b6a0c551e22be5b53b06289aa
-
SHA1
d5f84e85d21faeaa57d68d9bbe9c34166fd5ea87
-
SHA256
5e92e77867485f90074dd1f7067e9fd70edac53da130d6b0ec02e905519390b7
-
SHA512
f9997e679ea7cd4e80324b12417f29837e5d7b9aae091c0612f96b09d87b01450214c57b6e14de62e7ea30e581dc649dc3ffff3184809ab8d75789f25524555c
-
SSDEEP
24576:m6NWgMYSS1noxv7+KhURtH+qgLrUdcDXkpe3Qv19Vks:m63SS1ovKhdakwQvj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0547b53b6a0c551e22be5b53b06289aa_JaffaCakes118
Files
-
0547b53b6a0c551e22be5b53b06289aa_JaffaCakes118.exe windows:5 windows x86 arch:x86
948670a7ac1f4a612535c1a0062606bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
DeleteMonitorW
AddFormW
kernel32
GetVersion
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
VirtualAlloc
GetCurrentProcessId
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetLocalTime
FileTimeToLocalFileTime
DosDateTimeToFileTime
lstrcmpW
WriteConsoleW
LoadLibraryW
GetModuleFileNameW
GetProfileIntW
GetSystemDirectoryW
CreateDirectoryW
QueryPerformanceFrequency
GetACP
GetOEMCP
WideCharToMultiByte
LCMapStringW
GetUserDefaultLangID
EnumUILanguagesW
GetConsoleWindow
CloseHandle
lstrcmpiW
SetLastError
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
CreateFileW
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
IsValidCodePage
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
advapi32
RegCloseKey
RegDeleteValueW
rasapi32
RasGetEntryPropertiesW
psapi
GetProcessImageFileNameW
user32
GetIconInfo
LoadIconW
SetWindowsHookExW
DrawFocusRect
MessageBeep
SetScrollPos
GetComboBoxInfo
DrawTextW
DrawMenuBar
GetSystemMetrics
IsDlgButtonChecked
GetDlgItemInt
GetDlgItem
CreateDialogParamW
DdeConnect
DdeImpersonateClient
BeginPaint
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 814KB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.y8ta Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.404sr Size: 666KB - Virtual size: 666KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5hesg Size: 466KB - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ