Static task
static1
Behavioral task
behavioral1
Sample
0511ac3d2b9b35a40576d70a9bf08c91_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0511ac3d2b9b35a40576d70a9bf08c91_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0511ac3d2b9b35a40576d70a9bf08c91_JaffaCakes118
-
Size
588KB
-
MD5
0511ac3d2b9b35a40576d70a9bf08c91
-
SHA1
6ae7f305fad1f1bd0eaceb039c0323b204bbdfd0
-
SHA256
722232bc88e6a6f2ec12bd8abe5b4e1bcd322ac0f3a3c84626c8d4d41d7f92d5
-
SHA512
7e6139fb181cc6379795bc79ae0f29e54448bc0dd68bbbb4b8240bef67561a4141c195e9dead4e16ea1c538ada21c36a30239c4e8b87f42ec5f57c61da3476ba
-
SSDEEP
12288:MRdoxCDOrkqraQKCKiOWT6aSzRflASM+Care3E:MRuHYqnKYT08SM+UU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0511ac3d2b9b35a40576d70a9bf08c91_JaffaCakes118
Files
-
0511ac3d2b9b35a40576d70a9bf08c91_JaffaCakes118.exe windows:4 windows x86 arch:x86
d6d2a1d46cc3874113e41bb29701acdc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Write
ImageList_DragMove
ImageList_BeginDrag
MakeDragList
InitCommonControlsEx
ImageList_SetImageCount
CreateToolbar
CreateToolbarEx
ImageList_AddIcon
ImageList_AddMasked
ImageList_LoadImageW
ImageList_DragEnter
ImageList_GetImageInfo
ImageList_Add
DrawStatusText
ImageList_EndDrag
ImageList_Copy
ImageList_Destroy
ImageList_SetBkColor
ImageList_DrawIndirect
CreatePropertySheetPage
ImageList_LoadImage
gdi32
GetWindowExtEx
SelectObject
PolyPolygon
CreateEllipticRgnIndirect
CreatePolygonRgn
CreateHalftonePalette
GetSystemPaletteEntries
SetDIBits
CloseFigure
user32
DialogBoxParamW
TranslateMDISysAccel
WaitMessage
CreateDialogParamA
GetComboBoxInfo
ChildWindowFromPointEx
GetMenuStringA
RegisterClassA
GetDlgItemInt
AdjustWindowRectEx
GetKeyboardType
IsChild
DefWindowProcW
GetDoubleClickTime
VkKeyScanA
SendNotifyMessageW
ClipCursor
MapDialogRect
GetWindowModuleFileNameA
GetClassInfoW
OemKeyScan
MessageBoxW
WindowFromPoint
ShowScrollBar
GetAltTabInfo
GetForegroundWindow
ShowCursor
SetTimer
DdeInitializeW
GetMessageExtraInfo
DefDlgProcW
DefMDIChildProcA
InSendMessage
GetTopWindow
SendMessageA
ChangeDisplaySettingsW
IsCharLowerA
MonitorFromRect
DestroyWindow
EndDialog
OpenWindowStationW
TabbedTextOutW
BlockInput
EnumClipboardFormats
RemoveMenu
PostQuitMessage
IsCharUpperA
DrawIcon
InvalidateRgn
ShowWindow
ToAsciiEx
OemToCharA
RegisterClassExA
SetRect
EnumWindowStationsW
LockWindowUpdate
DdeCreateStringHandleA
CreateWindowExW
MessageBoxIndirectA
UnionRect
SetWindowsHookExA
FindWindowA
kernel32
HeapFree
HeapDestroy
SetComputerNameW
EnumSystemLocalesA
FillConsoleOutputCharacterW
GetCurrentProcessId
WideCharToMultiByte
ExitProcess
GetSystemTimeAsFileTime
GetStringTypeW
GetSystemTime
TlsAlloc
GetCurrentThreadId
DeleteCriticalSection
lstrcmpA
GetCurrentProcess
TlsGetValue
InitializeCriticalSection
WriteFile
InterlockedIncrement
GetLastError
FlushFileBuffers
GetLocalTime
GetPrivateProfileSectionW
GetStdHandle
GetCommandLineA
GetVersion
TerminateProcess
LeaveCriticalSection
GetNamedPipeHandleStateA
GetACP
ReadConsoleW
InterlockedDecrement
GetFullPathNameA
GetModuleHandleA
CloseHandle
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetCompressedFileSizeW
GetEnvironmentStringsW
CompareStringA
InterlockedExchange
LCMapStringA
GetFileType
SetEnvironmentVariableA
EnterCriticalSection
ReadConsoleOutputA
SetStdHandle
ReadFile
OpenMutexA
HeapAlloc
VirtualProtect
LoadLibraryA
SetLastError
HeapCreate
LCMapStringW
GetVolumeInformationW
TlsFree
FreeEnvironmentStringsA
CreateToolhelp32Snapshot
RtlUnwind
GetStringTypeA
TlsSetValue
MultiByteToWideChar
GetStartupInfoA
SetFilePointer
GetTimeZoneInformation
GetEnvironmentStrings
UnhandledExceptionFilter
GetCurrentThread
VirtualQuery
GetModuleFileNameA
GetProcAddress
GetOEMCP
FreeEnvironmentStringsW
WaitForMultipleObjects
VirtualFree
FileTimeToDosDateTime
QueryPerformanceCounter
HeapReAlloc
GetTickCount
CreateProcessW
CreateMutexA
CompareStringW
GetCPInfo
advapi32
RegOpenKeyW
LookupPrivilegeDisplayNameA
CryptGetHashParam
shell32
DoEnvironmentSubstA
SHGetFileInfoA
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ