Static task
static1
Behavioral task
behavioral1
Sample
a5868bbf8745c0a0e774474e3866d630_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a5868bbf8745c0a0e774474e3866d630_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
a5868bbf8745c0a0e774474e3866d630_JaffaCakes118
-
Size
2.4MB
-
MD5
a5868bbf8745c0a0e774474e3866d630
-
SHA1
d545feb8e67b2a358eedf2ccd53c3ec23a0ba8bc
-
SHA256
6c979478a7d71aef94be5ea945afcf1df0db57031114d9c446c44ea70c5d0897
-
SHA512
551845bd698ce58a976c232e38761853f6719323ba6c8052b3d0221c1fb756d8016f3dbe42cda1085912d395e0f44a4fe52d6353f76bd536ae06477c7b22f3a7
-
SSDEEP
24576:ixujnsQBTBoQAkaZcHtocSOnqDDdYEfLzU6/SVQ9z3yuTUVroft:ixuzszmsWIDKTyCu4Sft
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a5868bbf8745c0a0e774474e3866d630_JaffaCakes118
Files
-
a5868bbf8745c0a0e774474e3866d630_JaffaCakes118.exe windows:5 windows x86 arch:x86
bb40ccd5d9ca15cbcfac9d25c496476e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginDeferWindowPos
AnyPopup
GetDialogBaseUnits
DdeClientTransaction
IsDialogMessageW
GetIconInfo
DestroyIcon
LoadBitmapW
CopyRect
FrameRect
WindowFromPoint
ClientToScreen
GetWindowRect
GetClientRect
EnableScrollBar
ShowScrollBar
SetScrollRange
GetWindowDC
GetDC
DrawIcon
TrackPopupMenuEx
DeleteMenu
GetSystemMetrics
CharNextW
DrawFrameControl
wininet
HttpQueryInfoW
InternetOpenUrlW
shell32
DragQueryFileW
kernel32
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
GetStringTypeW
OutputDebugStringW
LoadLibraryExW
HeapFree
GetCPInfo
GetACP
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
TlsFree
RtlUnwind
GetConsoleCP
VirtualAlloc
HeapAlloc
GetEnvironmentStringsW
GetLastError
EnterCriticalSection
LeaveCriticalSection
ReadFile
SetEndOfFile
EscapeCommFunction
MulDiv
GetSystemInfo
FileTimeToSystemTime
CreateSemaphoreW
LoadLibraryW
GetModuleFileNameW
GlobalFindAtomW
GetSystemDirectoryW
FindFirstFileW
CopyFileW
GetDefaultCommConfigW
GetOEMCP
GetUserDefaultLCID
GetConsoleWindow
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
GlobalUnlock
GetCommandLineW
CreateFileW
RaiseException
IsProcessorFeaturePresent
EncodePointer
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
advapi32
RegEnumValueW
OpenSCManagerW
RegEnumKeyExW
comdlg32
FindTextW
PageSetupDlgW
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 415KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.otaih Size: 618KB - Virtual size: 617KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ao1lng Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nea0t Size: 459KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3ya4re Size: 261KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ