Static task
static1
Behavioral task
behavioral1
Sample
5d232f78738875b7f56976ffc7d3dd51_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5d232f78738875b7f56976ffc7d3dd51_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
5d232f78738875b7f56976ffc7d3dd51_JaffaCakes118
-
Size
2.4MB
-
MD5
5d232f78738875b7f56976ffc7d3dd51
-
SHA1
7c97031ac8329e63d0894e55a6cbdb0f0e9df2e3
-
SHA256
e9b412a4170741627b93cc4d12fb88ef34c60d5dc6cc72ae330ec4808c1687ff
-
SHA512
bc057fdac12daf95bdb990be6c0976e5166fed6949278c1826711ca624069d1f6395e4e88c7252c6aa80e40f92a323935dab0e44306cb319f9534243c542fb5d
-
SSDEEP
24576:KLxUj52suo4GSS4Z3MDiqYLXy1BBumPLcjwrXdb:KNUF2sR4GSdfqYm1B5pjdb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d232f78738875b7f56976ffc7d3dd51_JaffaCakes118
Files
-
5d232f78738875b7f56976ffc7d3dd51_JaffaCakes118.exe windows:5 windows x86 arch:x86
dd5a48cb8a29d68b90cba2ee0bbfcd6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharLowerW
CheckRadioButton
CheckDlgButton
DeferWindowPos
CharPrevW
DrawFrameControl
GetWindowInfo
GetGUIThreadInfo
CopyIcon
LoadCursorFromFileW
FrameRect
GetPropW
ReleaseDC
SetActiveWindow
SetMenuDefaultItem
CreatePopupMenu
GetMenu
kernel32
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
GlobalLock
SetFilePointerEx
GetCurrentThreadId
ReleaseMutex
CloseHandle
GetLocalTime
FileTimeToSystemTime
GetCommandLineW
ExpandEnvironmentStringsW
FindFirstFileW
ReplaceFileW
FindCloseChangeNotification
GetVersionExW
IsValidCodePage
GetACP
MultiByteToWideChar
CompareStringW
WriteConsoleW
VirtualAlloc
DecodePointer
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
CreateFileW
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
advapi32
RegEnumKeyExW
RegQueryInfoKeyW
setupapi
CM_Get_DevNode_Registry_Property_ExW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDriverInfoDetailW
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
CM_Get_Parent
SetupFindNextLine
CM_Get_Device_ID_ExW
SetupDiGetActualSectionToInstallW
wintrust
WTHelperProvDataFromStateData
CryptCATAdminReleaseCatalogContext
CryptCATAdminCalcHashFromFileHandle
CryptCATCatalogInfoFromContext
WinVerifyTrust
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 841KB - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r3sse4 Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.95pe Size: 370KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.a9o0 Size: 442KB - Virtual size: 441KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r6ic Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ