Static task
static1
Behavioral task
behavioral1
Sample
855788051179cbb6a7dd511949595af5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
855788051179cbb6a7dd511949595af5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
855788051179cbb6a7dd511949595af5_JaffaCakes118
-
Size
680KB
-
MD5
855788051179cbb6a7dd511949595af5
-
SHA1
6b17f53eb08be517d03eaf54e34fa9c03ecd278b
-
SHA256
c708b0c2a112f110d62829bc1f4ded7b6b86f3854d22afe0f2da3a01ea15ff50
-
SHA512
d713079180a1fa729c29c27baef88478632c9734fb40498a468910af63888a826991960b2c09c15ab1d1f11b7a8cfbac750cc1addda737d50861b57e2b7afb2d
-
SSDEEP
6144:it9pb4nVLLhW2ddkJl1rKNjU2FpPB6nqciXLfuk4LHPTB9ZBbhXd9W:g9l4nVLLrdE1X4PYqBCtLHPTfZZ9W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 855788051179cbb6a7dd511949595af5_JaffaCakes118
Files
-
855788051179cbb6a7dd511949595af5_JaffaCakes118.exe windows:5 windows x86 arch:x86
168f8de98142b125414714340b475ceb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
RaiseException
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
SetLastError
MultiByteToWideChar
ReadFile
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
FreeLibrary
LoadLibraryExW
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
MoveFileExW
LocalFree
LocalLock
FormatMessageW
WriteFile
SetFilePointerEx
SetEndOfFile
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetACP
GetFileSizeEx
lstrcpyW
SetEnvironmentVariableA
CreateThread
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
LCMapStringA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
SetFilePointer
GetSystemTimeAsFileTime
CreateDirectoryW
GetCommandLineW
GetModuleHandleW
CloseHandle
GetFullPathNameW
SetCurrentDirectoryW
DeleteFileW
lstrlenW
GetDriveTypeW
GetModuleFileNameW
GetProcAddress
FindResourceExW
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
GetModuleHandleA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
LCMapStringW
HeapCreate
CompareStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetModuleFileNameA
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
FindResourceW
LoadResource
LockResource
CompareStringA
SizeofResource
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
user32
SetTimer
EndDialog
GetWindowLongW
CreateDialogParamW
CharNextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
CallWindowProcW
DefWindowProcW
GetActiveWindow
DialogBoxParamW
PostQuitMessage
GetParent
DestroyWindow
BeginPaint
EndPaint
KillTimer
LoadStringW
wsprintfW
MessageBoxW
GetDlgItemTextW
SetActiveWindow
EnableWindow
IsDialogMessageW
ShowWindow
MoveWindow
SetWindowLongW
SetDlgItemTextW
SetWindowTextW
GetSystemMetrics
LoadImageW
PostMessageW
GetDlgItem
SendMessageW
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
UnregisterClassA
SetWindowPos
MapWindowPoints
gdi32
SelectObject
Rectangle
GetStockObject
advapi32
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
ShellExecuteW
ole32
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
oleaut32
VarUI4FromStr
SysAllocString
SysStringByteLen
SysFreeString
shlwapi
PathFindExtensionW
PathGetDriveNumberW
PathIsUNCW
PathFileExistsW
PathAddBackslashW
comctl32
DestroyPropertySheetPage
CreatePropertySheetPageW
PropertySheetW
InitCommonControlsEx
Sections
.text Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ