Static task
static1
Behavioral task
behavioral1
Sample
5db860cfd456d7285428840f5fe06cb1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5db860cfd456d7285428840f5fe06cb1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
5db860cfd456d7285428840f5fe06cb1_JaffaCakes118
-
Size
2.3MB
-
MD5
5db860cfd456d7285428840f5fe06cb1
-
SHA1
e6bf09434bb75b4042eb7f93544ddb9b63ffc965
-
SHA256
cdf82fc5ffcead85b88ea75a454e50cc908cc1ca4ec6791ef200eec706698cec
-
SHA512
5cb663d0acb99f2568b00e114b007695f804f68dee39c594b35aed42dc18b083e64a935a6e641245c58700c84f80c1d635c5727627774a35a53060c4cec90cc7
-
SSDEEP
24576:d6ncD89HPyo6QI7I+j8/gmSShWl0l6P4M3CUrH:dvY9zw0+Lmtg1SAH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5db860cfd456d7285428840f5fe06cb1_JaffaCakes118
Files
-
5db860cfd456d7285428840f5fe06cb1_JaffaCakes118.exe windows:5 windows x86 arch:x86
76116ae4aa0928995b566199763fe9f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetWriteWatch
HeapDestroy
HeapAlloc
HeapReAlloc
LeaveCriticalSection
DeleteCriticalSection
GetFileSize
GetFileSizeEx
FileTimeToLocalFileTime
lstrcmpiW
OpenMutexW
GetModuleHandleW
GetProfileIntW
GetFileAttributesW
FindNextChangeNotification
BuildCommDCBAndTimeoutsW
CommConfigDialogW
GetOEMCP
GetCPInfo
GetLocaleInfoW
GetStringTypeW
GetConsoleWindow
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
LocalFree
FlushFileBuffers
LCMapStringW
HeapSize
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
EnterCriticalSection
GetACP
IsValidCodePage
IsDebuggerPresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
GetConsoleCP
LocalAlloc
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
GetFileType
CreateFileW
GetStdHandle
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
ExitProcess
DecodePointer
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
user32
MonitorFromWindow
SetScrollInfo
GetClassNameW
FindWindowW
GetParent
OffsetRect
FrameRect
MessageBoxW
GetWindowRect
GetClientRect
GetPropW
GetScrollRange
ScrollDC
ScrollWindow
GetUpdateRect
GetWindowDC
GetDC
UpdateWindow
DestroyMenu
GetSystemMetrics
CopyAcceleratorTableW
IsWindowEnabled
SetTimer
CharNextW
DialogBoxParamW
OpenIcon
GetClassInfoExW
CallWindowProcW
SendMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
DrawFrameControl
ClientToScreen
advapi32
RegDeleteKeyW
opengl32
glTexImage2D
glColorMask
glCopyTexImage2D
glDeleteTextures
glDrawArrays
glDrawElements
glFlush
glTexSubImage2D
glStencilOp
glStencilFunc
glReadPixels
glGetError
glGenTextures
glClear
shell32
ExtractIconExW
SHFileOperationW
SHCreateDirectoryExW
SHPathPrepareForWriteW
CommandLineToArgvW
DragQueryFileW
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 862KB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.t9eor2 Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ll2t Size: 271KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s9iorn Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tate7 Size: 248KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ