Static task
static1
Behavioral task
behavioral1
Sample
5ae801d940de554daaac9aefeb1eff30_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5ae801d940de554daaac9aefeb1eff30_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5ae801d940de554daaac9aefeb1eff30_JaffaCakes118
-
Size
1.1MB
-
MD5
5ae801d940de554daaac9aefeb1eff30
-
SHA1
b098b18c291b97f504180b2de7ee7a95e5cc75a8
-
SHA256
5429d8224a3d4388b15bb00e050a29560dca7960413511f464ae5c43e1775d3f
-
SHA512
ecaa440ab462e343582994771577798c91609b18af1960f811d85b40c3696af743bc86ad474f3bcadc702ff7b6cb655c228b70fb9fd7e3da82bebc268485ee70
-
SSDEEP
12288:QMcXk39oFM3T4OoZEGdek80aHEPHTOVvjVgfWrKl88OlupeeH25gPKhbihzWOm:R1CM8OoJj8rkPzgpHrd8Ofb53b+Wl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ae801d940de554daaac9aefeb1eff30_JaffaCakes118
Files
-
5ae801d940de554daaac9aefeb1eff30_JaffaCakes118.exe windows:5 windows x86 arch:x86
89be6938dd41a0ef32bdc2dad6e81ebb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyWindow
GetClassInfoW
IsIconic
IsZoomed
GetMonitorInfoW
GetIconInfo
FindWindowExW
SetParent
EqualRect
SetRectEmpty
InvertRect
FillRect
SetWindowRgn
GetUpdateRect
UpdateWindow
RemoveMenu
GetMenuItemCount
GetMenuItemID
CheckMenuItem
CreatePopupMenu
CharNextW
RegisterWindowMessageW
psapi
EnumDeviceDrivers
GetMappedFileNameW
comctl32
FlatSB_GetScrollPos
CreateToolbarEx
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
ImageList_DrawIndirect
ImageList_AddMasked
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_Destroy
ord17
DestroyPropertySheetPage
InitializeFlatSB
uxtheme
DrawThemeParentBackground
GetThemeSysColor
SetWindowTheme
secur32
QuerySecurityPackageInfoW
kernel32
IsDebuggerPresent
LoadLibraryExW
RtlUnwind
OutputDebugStringW
HeapReAlloc
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
IsProcessorFeaturePresent
CreateDirectoryW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LeaveCriticalSection
VirtualAlloc
HeapDestroy
HeapAlloc
HeapFree
GetEnvironmentStringsW
FreeEnvironmentStringsW
DeleteCriticalSection
ReleaseSemaphore
WaitForMultipleObjects
SetHandleCount
CloseHandle
CreateEventW
CreateFileMappingW
ExpandEnvironmentStringsW
GetSystemDirectoryW
DeleteFileW
FindFirstFileW
GetCommandLineA
GetLastError
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 958KB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ