Static task
static1
Behavioral task
behavioral1
Sample
5e39796740d470869174eaecd70706af_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5e39796740d470869174eaecd70706af_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
5e39796740d470869174eaecd70706af_JaffaCakes118
-
Size
504KB
-
MD5
5e39796740d470869174eaecd70706af
-
SHA1
76afe1f1de09e25adcbf675f68b2b0370ad37aac
-
SHA256
f93057ea3b4ac606408e145b212d5b257744920dde857e0f3ced57520c22a8fb
-
SHA512
5b48dacb64f3373121a83aedef476854db2331533fe28f98f50b6128b7f22a0c25bf2a497daccb3662b7d6872f1a3e4156b1e3e4edf2da19d35aa63c99e3af25
-
SSDEEP
6144:c867hSKXt8UaTxPMhvXoIdUbYgiE9ZrH16Ov1rN2s4JI/yUICVL8VfaDCFToWQH:y7G5xP+L6kZE9VV6O1MUgfaOzQH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 5e39796740d470869174eaecd70706af_JaffaCakes118
Files
-
5e39796740d470869174eaecd70706af_JaffaCakes118.exe windows:5 windows x86 arch:x86
60ef683643ca1c2ba219017b2c3b255a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
GetConsoleCP
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
CloseHandle
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
ReadFile
GetModuleFileNameA
lstrcpyA
lstrcatA
FindFirstFileA
lstrcmpiA
CopyFileA
FindNextFileA
FindClose
LoadLibraryW
GetProcAddress
HeapAlloc
FlushFileBuffers
GetVersionExA
GetSystemDirectoryA
EnumSystemLanguageGroupsA
EnumUILanguagesA
GetModuleFileNameW
GetCPInfoExA
EnumSystemCodePagesA
CreateFileA
CreateFileMappingA
GetStdHandle
WriteFile
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetCurrentThreadId
SetLastError
LoadLibraryA
MapViewOfFile
GetSystemTime
Sleep
SetSystemPowerState
GetCurrentProcess
GetLastError
TlsFree
TlsSetValue
GetCommState
CreateWaitableTimerA
SetWaitableTimer
LocalAlloc
TlsAlloc
TlsGetValue
CreateNamedPipeA
GetModuleHandleW
GetStartupInfoA
GetCommandLineA
HeapFree
RtlUnwind
ConnectNamedPipe
GetModuleHandleA
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
SetFilePointer
user32
PostQuitMessage
DefWindowProcA
LoadCursorA
LoadIconA
GetUpdateRgn
ExitWindowsEx
CheckMenuItem
GetMenu
SendMessageA
RegisterClassA
CreateWindowExA
ShowWindow
LoadImageA
GetSysColor
FillRect
OemKeyScan
GetCursorPos
TrackPopupMenu
FindWindowA
GetWindowThreadProcessId
InflateRect
GetDlgItem
GetSystemMetrics
IsDlgButtonChecked
DrawMenuBar
GetDesktopWindow
GetWindowRect
ReleaseDC
LoadBitmapA
SetScrollPos
SetTimer
FindWindowExW
GetWindowTextW
FindWindowExA
KillTimer
GetMenuState
DestroyWindow
SetMenuItemBitmaps
EnumChildWindows
BeginPaint
MessageBoxA
SetWindowTextA
GetDC
GetClientRect
RegisterWindowMessageA
gdi32
GetStockObject
CreateSolidBrush
BitBlt
SetPixelFormat
CreateFontIndirectA
GetTextMetricsA
SetTextAlign
SetBkColor
CreateCompatibleBitmap
GetPixel
DeleteDC
GetTextCharsetInfo
CreateDIBSection
SetBkMode
CreateHatchBrush
CreateFontA
SetTextColor
DeleteObject
CreatePolygonRgn
CreatePen
SelectObject
MoveToEx
CreateCompatibleDC
CreateRectRgn
GetRegionData
comdlg32
GetOpenFileNameA
FindTextA
advapi32
OpenEventLogW
CloseEventLog
GetOldestEventLogRecord
ReadEventLogA
shell32
ShellExecuteA
SHAddToRecentDocs
ole32
CoCreateInstance
CoInitialize
ws2_32
WSAGetLastError
WSACreateEvent
psapi
EmptyWorkingSet
GetWsChanges
avifil32
AVIStreamOpenFromFileA
AVIStreamStart
AVIStreamReadFormat
AVIFileInit
AVIStreamInfoA
AVIFileCreateStreamA
AVIFileOpenA
AVIFileInfoA
AVIFileGetStream
AVIStreamLength
AVIStreamSetFormat
msvfw32
ord2
MCIWndCreateA
DrawDibOpen
DrawDibDraw
winscard
SCardGetProviderIdW
winmm
timeGetTime
crypt32
CertGetNameStringA
shlwapi
StrToIntExA
PathFindFileNameA
PathRemoveArgsA
rpcrt4
UuidToStringW
UuidCreateSequential
opengl32
glRenderMode
glGetIntegerv
glSelectBuffer
glInitNames
glOrtho
glPushName
glMatrixMode
glPushMatrix
glLoadIdentity
glu32
gluPickMatrix
setupapi
CM_Invert_Range_List
CM_Is_Dock_Station_Present
CM_Locate_DevNodeA
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsA
Sections
.text Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 318KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ