Static task
static1
Behavioral task
behavioral1
Sample
75305554a39af1eca48aaa3bb1bca728_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
75305554a39af1eca48aaa3bb1bca728_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
75305554a39af1eca48aaa3bb1bca728_JaffaCakes118
-
Size
2.0MB
-
MD5
75305554a39af1eca48aaa3bb1bca728
-
SHA1
57486461a04895a6cca223b666cf651a64616824
-
SHA256
d7ecb8eda38d0a9a13bce72e5f6e8dc4f3e05e896a1eed325f3e6c6545833a6c
-
SHA512
6687d0c5ecfb825e459eee01522996eb11a0839e49bd79ffbf47a709f10996f2020520366b2252e84a600fbefa0a3553c16eaf8c0398624e4dfd79a4c2c3cfc5
-
SSDEEP
24576:rFdOEbdogWh99wOh/jgqyEQTygUDK/1Du1WDE:5dOEZlo7dgqyEQTygkK/sB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75305554a39af1eca48aaa3bb1bca728_JaffaCakes118
Files
-
75305554a39af1eca48aaa3bb1bca728_JaffaCakes118.exe windows:5 windows x86 arch:x86
3b9b3c9c946936f11ae31be61ddb4992
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCrackUrlW
user32
EnumPropsExW
DefWindowProcW
RegisterClassExW
SetDlgItemInt
SendDlgItemMessageW
GetDlgCtrlID
SetFocus
UnpackDDElParam
CheckMenuRadioItem
GetClassWord
CopyRect
GetCursorPos
AdjustWindowRect
DrawMenuBar
RemovePropW
GetDC
TrackPopupMenu
CreatePopupMenu
GetKeyboardLayoutList
kernel32
FlushFileBuffers
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
GlobalUnlock
LocalAlloc
LocalFree
VirtualAlloc
VirtualFree
FreeEnvironmentStringsW
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetConsoleCP
FileTimeToLocalFileTime
FileTimeToSystemTime
LoadLibraryW
GetModuleHandleW
CreateProcessW
GetStartupInfoW
FindResourceW
GetTempPathW
RemoveDirectoryW
GetFullPathNameW
FindNextFileW
CommConfigDialogW
WideCharToMultiByte
CompareStringW
LCMapStringW
GetConsoleWindow
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
SystemTimeToFileTime
IsProcessorFeaturePresent
GetCommandLineW
RaiseException
CreateFileW
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsDebuggerPresent
IsValidCodePage
GetACP
uxtheme
DrawThemeBackground
GetThemeColor
GetThemeSysColor
IsAppThemed
GetWindowTheme
OpenThemeData
advapi32
RegQueryInfoKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 505KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.22rio Size: 269KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0h37h Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l5swm Size: 463KB - Virtual size: 462KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ