Static task
static1
Behavioral task
behavioral1
Sample
05e977355a47a6cdd2008cac2a5f0b2d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
05e977355a47a6cdd2008cac2a5f0b2d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05e977355a47a6cdd2008cac2a5f0b2d_JaffaCakes118
-
Size
740KB
-
MD5
05e977355a47a6cdd2008cac2a5f0b2d
-
SHA1
30831afd4ace7a3d06e7974acb2ada9295880bb7
-
SHA256
58f5807675a5270af58d9f38855a65a6d2ec75fbb74e8f82a74484ea08710318
-
SHA512
4125c6400f88600280772d33a93bab3af94635fe380f2af82e15790fee51ca7b092905e01c40473941b7d9c6c9b84f839087a8991d929b0df6d259a77ea4e41f
-
SSDEEP
12288:GzxveAzCxZ454KXAuYrQUsOifUE13HiUomTG9RFqtK2amYe:CmeCxZ4eWAuYcjOiMgQEEOK2JX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05e977355a47a6cdd2008cac2a5f0b2d_JaffaCakes118
Files
-
05e977355a47a6cdd2008cac2a5f0b2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e5f1c80b982b6227bb5268b8c793571
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
RaiseException
DeleteCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapFree
lstrlenA
FindClose
CreateDirectoryA
RemoveDirectoryA
FormatMessageA
FindFirstFileA
ReadFile
GetSystemDirectoryA
GetWindowsDirectoryA
GetTempPathA
GetEnvironmentVariableA
GetLogicalDriveStringsA
GetDriveTypeA
GetStringTypeExA
GetTempFileNameA
FindNextFileA
CreateProcessA
GetExitCodeProcess
GetVersion
lstrcmpA
GetDiskFreeSpaceA
GetModuleHandleA
MulDiv
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
OutputDebugStringA
LoadLibraryExA
GetSystemDefaultLangID
GetUserDefaultLangID
EnumResourceLanguagesA
FlushFileBuffers
lstrcmpiA
GlobalMemoryStatus
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
lstrcpynA
MultiByteToWideChar
lstrlenW
CreateMutexA
GetFileAttributesA
SetFileAttributesA
CopyFileA
DebugBreak
HeapSize
HeapReAlloc
HeapDestroy
LocalAlloc
GetStartupInfoA
GetCommandLineA
GetProcAddress
ExitProcess
LoadLibraryA
Sleep
ResetEvent
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcatA
lstrcpyA
VirtualProtect
WriteFile
MoveFileA
DeleteFileA
GetFileSize
SetFilePointer
CreateFileA
FindResourceExA
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateEventA
SetEvent
GetExitCodeThread
WaitForSingleObject
GetLastError
CreateThread
CloseHandle
FreeLibrary
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
RtlUnwind
user32
GetSubMenu
LoadMenuA
TrackPopupMenu
EnableMenuItem
IsDialogMessageA
ExitWindowsEx
GetDC
SetFocus
DefWindowProcA
CallWindowProcA
GetSystemMetrics
LoadImageA
DestroyMenu
GetSystemMenu
DialogBoxParamA
CloseClipboard
InvalidateRect
RedrawWindow
ShowWindow
CreateWindowExA
DestroyWindow
RemovePropA
SetPropA
IsWindow
PostMessageA
MessageBoxA
KillTimer
EnableWindow
SetTimer
GetPropA
PostQuitMessage
CreateDialogParamA
SetClipboardData
ModifyMenuA
EmptyClipboard
GetActiveWindow
LoadStringA
SetWindowLongA
SendMessageA
EndDialog
GetWindowLongA
GetWindow
OpenClipboard
LoadIconA
ScreenToClient
SystemParametersInfoA
GetWindowRect
GetParent
MapWindowPoints
SetWindowPos
SetWindowTextA
GetDlgItem
UnregisterClassA
CharNextA
GetDesktopWindow
IsWindowVisible
wvsprintfA
GetClientRect
gdi32
GetDeviceCaps
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegDeleteValueA
RegOpenKeyA
RegQueryInfoKeyA
RegEnumKeyExA
OpenSCManagerA
LockServiceDatabase
UnlockServiceDatabase
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
shell32
ShellExecuteA
ShellExecuteExA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
ole32
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
oleaut32
VarUI4FromStr
comctl32
DestroyPropertySheetPage
PropertySheetA
CreatePropertySheetPageA
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ