Static task
static1
Behavioral task
behavioral1
Sample
88ba10d0362f8a77956a4b42cc253d2c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
88ba10d0362f8a77956a4b42cc253d2c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
88ba10d0362f8a77956a4b42cc253d2c_JaffaCakes118
-
Size
2.1MB
-
MD5
88ba10d0362f8a77956a4b42cc253d2c
-
SHA1
f95e63c97d30e5c6b7745bb5946c7fe85522d9f3
-
SHA256
b861f263a56911650983347fd9ac99dccdc8d1bbf33dc5b27c9003937c277e43
-
SHA512
f176894ff2474933253b879fb7ca8a7ed02e07923f63d18707123896b2888e7b0894446521a7a50d6ae0357e2084d3cbfa78081db0d5f565352fb7e74b4d6aa8
-
SSDEEP
24576:obtV1avjfzuGkz4xS3pcBCXwumuLLaIhbKuX7Xv:obtL0zu7z4puNhWuLf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88ba10d0362f8a77956a4b42cc253d2c_JaffaCakes118
Files
-
88ba10d0362f8a77956a4b42cc253d2c_JaffaCakes118.exe windows:5 windows x86 arch:x86
4cba2b7ee784816d62f5a3a96fdbd986
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ExitWindowsEx
SetScrollRange
UnregisterClassW
RegisterClassExW
DdeNameService
SystemParametersInfoW
IsDialogMessageW
CopyIcon
LoadBitmapW
GetWindow
GetParent
UnionRect
GetWindowRect
GetWindowTextLengthW
SetPropW
DrawFrameControl
SetWindowRgn
GetWindowDC
GetDC
UpdateWindow
SetMenuInfo
AppendMenuW
DrawMenuBar
GetSystemMetrics
KillTimer
CheckDlgButton
SetDlgItemInt
BringWindowToTop
IsIconic
BeginDeferWindowPos
GetLayeredWindowAttributes
CreateWindowExW
advapi32
RegDeleteKeyW
kernel32
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
CloseHandle
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
HeapReAlloc
RaiseException
GlobalLock
VirtualAlloc
HeapDestroy
CreateFiberEx
WaitForSingleObject
InitAtomTable
SetEndOfFile
SetFilePointer
MulDiv
GetSystemTime
GetSystemTimeAsFileTime
GetSystemInfo
FlushViewOfFile
lstrlenW
CreateMutexW
CreateEventW
LoadLibraryW
CreateProcessW
FindResourceW
GetPrivateProfileIntW
DeleteFileW
FindFirstFileW
GetCPInfo
EnumDateFormatsExW
GetConsoleWindow
IsProcessorFeaturePresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCommandLineW
CreateFileW
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
winscard
SCardGetStatusChangeW
secur32
DeleteSecurityContext
TranslateNameW
QuerySecurityPackageInfoW
InitializeSecurityContextW
winspool.drv
GetSpoolFileHandle
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 252KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ra64oy Size: 1008KB - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cee8e5 Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.156s1 Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rn3eo Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ