Static task
static1
Behavioral task
behavioral1
Sample
45f54827a449907e1675372b588e4958_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
45f54827a449907e1675372b588e4958_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
45f54827a449907e1675372b588e4958_JaffaCakes118
-
Size
1.9MB
-
MD5
45f54827a449907e1675372b588e4958
-
SHA1
f73b6ec559b068e5422ee193167e3ceb287bb7b4
-
SHA256
bc5b1e829711e1e79f8e1791eea365719cca945c5a3669809360aa18d612f657
-
SHA512
ba456b1439235acc2225d327b1be52872f3a3805a297fbd7d9938fc7cb90df5439c4fe3574990b0391df4c140a62ee47e7e9e6bc249654abdf7a3b496e6c0932
-
SSDEEP
24576:A1xkBrTN4+lghVQelL9q3jiQ9onHrNV17DV9S8k:A1+BrTNnlg8S09oLtDHXk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45f54827a449907e1675372b588e4958_JaffaCakes118
Files
-
45f54827a449907e1675372b588e4958_JaffaCakes118.exe windows:5 windows x86 arch:x86
11714cede3afc3ed96d000ac841e90ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyW
RegEnumKeyExW
RegQueryValueExW
OpenSCManagerW
RegCloseKey
winspool.drv
FreePrinterNotifyInfo
user32
GetMessagePos
SendMessageW
MapDialogRect
CreateIconFromResourceEx
CreateIcon
DestroyCursor
IsGUIThread
CopyRect
FrameRect
FillRect
GetSysColorBrush
MapWindowPoints
GetWindowTextLengthW
SetWindowTextW
GetScrollRange
ReleaseDC
GetDCEx
GetMenuItemCount
GetSystemMetrics
LoadAcceleratorsW
GetKeyboardType
GetFocus
IsClipboardFormatAvailable
DialogBoxParamW
IsIconic
IsWindowVisible
BeginDeferWindowPos
SetWindowPos
UnregisterClassW
crypt32
CryptProtectData
CryptHashPublicKeyInfo
CryptExportPKCS8
CertVerifyTimeValidity
CertGetPublicKeyLength
CertGetEnhancedKeyUsage
CertAddCertificateContextToStore
CertAddEncodedCertificateToStore
CertFreeCRLContext
CryptEncodeObject
kernel32
HeapSize
HeapReAlloc
HeapAlloc
RtlUnwind
LCMapStringW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
LoadLibraryExW
GlobalFree
VirtualAlloc
InitializeCriticalSection
ReadFile
CloseHandle
FileTimeToLocalFileTime
MapViewOfFile
OutputDebugStringW
GetDiskFreeSpaceExW
FindFirstFileW
FindNextFileW
GetCPInfo
GetUserGeoID
GetStringTypeW
GetConsoleWindow
TlsFree
TlsSetValue
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
CreateFileW
ole32
CoTaskMemFree
StringFromCLSID
Sections
.text Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 757KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.8a0b Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l7eno Size: 424KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rest Size: 407KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ