Static task
static1
Behavioral task
behavioral1
Sample
05e6819fb43cef11418c86789ed8c2dc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
05e6819fb43cef11418c86789ed8c2dc_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
05e6819fb43cef11418c86789ed8c2dc_JaffaCakes118
-
Size
49KB
-
MD5
05e6819fb43cef11418c86789ed8c2dc
-
SHA1
55d5d17ea563ba0b018ded21f1fb2237cfa60275
-
SHA256
183f515f6b504d229fb6f5817440d9c00b91da3916bf5cc0b37e186654d9bcfe
-
SHA512
bb1a4068911f4596b24bf619ddd0b5876a85e86f6ddeab8612a755ea63899e336cd797fc90fb70bcce77dd4865a6c44242f2c1682de836db34cc1fd3bd89d681
-
SSDEEP
1536:nS5BxXVQtC4GtObvoAR1BtK4lxoUHeCvEVR:SDlVGGtcJjtPoUHe7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e6819fb43cef11418c86789ed8c2dc_JaffaCakes118
Files
-
05e6819fb43cef11418c86789ed8c2dc_JaffaCakes118.exe windows:5 windows x86 arch:x86
ddfe90430141879f46e8b620233477a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursorPos
SendMessageW
GetWindowTextW
GetDlgItemTextW
CloseWindowStation
GetKeyState
CharLowerBuffA
GetIconInfo
EndDialog
GetDlgItem
GetDlgItemTextA
SetProcessWindowStation
GetForegroundWindow
ToUnicode
PeekMessageA
GetClassNameW
GetKeyboardState
OpenDesktopA
DrawIcon
OpenWindowStationA
GetClipboardData
DispatchMessageW
GetWindowLongW
PeekMessageW
ExitWindowsEx
GetMessageA
SetThreadDesktop
FindWindowExW
CloseDesktop
GetMessageW
LoadCursorW
GetWindowThreadProcessId
MsgWaitForMultipleObjects
kernel32
FindNextFileW
MultiByteToWideChar
FindFirstFileW
HeapAlloc
GetModuleFileNameA
FindResourceW
ReadFile
lstrcmpiA
GetFileTime
MapViewOfFile
CreateThread
GetCurrentThreadId
GlobalUnlock
lstrcmpiW
GetTickCount
GetLogicalDrives
GetTempFileNameW
GetExitCodeProcess
lstrcpynW
ReleaseMutex
lstrcpyA
ExpandEnvironmentStringsW
SetEndOfFile
OpenMutexW
IsBadReadPtr
DisconnectNamedPipe
lstrlenW
lstrcatA
CopyFileW
GetVersionExW
GetLocalTime
GetLastError
SystemTimeToFileTime
CreateFileMappingW
WriteFile
CreateMutexW
WriteProcessMemory
GetProcessHeap
InitializeCriticalSection
GetSystemTime
lstrlenA
OpenProcess
HeapFree
lstrcatW
ResetEvent
UnmapViewOfFile
GetModuleHandleA
FlushFileBuffers
FindClose
GetDriveTypeW
DeleteFileW
GetSystemTimeAsFileTime
CreateEventW
GetUserDefaultUILanguage
WaitForSingleObject
GetTimeZoneInformation
SetFileTime
SetFilePointer
Sections
.efwv Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tqfyv Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qrmlmn Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ