Static task
static1
Behavioral task
behavioral1
Sample
0cd38e18027da4fa19ef7e53155b6995_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
0cd38e18027da4fa19ef7e53155b6995_JaffaCakes118
-
Size
3.9MB
-
MD5
0cd38e18027da4fa19ef7e53155b6995
-
SHA1
d620be0f573e9236f4e20cd8d442af39943059e0
-
SHA256
42b793620ccc9b361fb627bbc381201a16e55b275446cdd466abedb8c99998b0
-
SHA512
104c660eca8027b508998d66f925eab992a7e8384eee363b765c36de50beedb12fe2f20ef9784dcb2bcabb98da7163bddbe7f420326447569bedaabfbd5924a6
-
SSDEEP
98304:i0NB93Q53yuQaxlCiHqORcwxDAoHa126mUsj:i0g3wWzHDc8DAoHSmUs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cd38e18027da4fa19ef7e53155b6995_JaffaCakes118
Files
-
0cd38e18027da4fa19ef7e53155b6995_JaffaCakes118.exe windows:5 windows x86 arch:x86
54b50ae6dff747a1a24a8a9a8f6299c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
HeapSize
HeapReAlloc
VirtualAlloc
IsValidLocale
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
DeleteCriticalSection
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetLocaleInfoW
CompareStringA
CompareStringW
GetSystemTime
CreateEventA
GetLocalTime
WaitForSingleObject
GetDateFormatA
GetSystemDefaultLangID
GetTempPathW
MultiByteToWideChar
FindFirstFileW
FindNextFileW
FindClose
GetTempFileNameW
GetCurrentProcess
VirtualAllocEx
GetTimeZoneInformation
GetTickCount
IsValidCodePage
SystemTimeToTzSpecificLocalTime
GetFileType
SetHandleCount
SetEnvironmentVariableA
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
Sleep
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
GetCurrentThread
HeapAlloc
HeapFree
user32
GetDlgCtrlID
CloseDesktop
GetShellWindow
EnumWindows
GetAltTabInfoA
GetSystemMetrics
DrawIcon
SetMenuInfo
AdjustWindowRect
DeleteMenu
TranslateAcceleratorA
SetPropA
DrawFrameControl
DrawMenuBar
AddClipboardFormatListener
CopyImage
MonitorFromRect
ChangeClipboardChain
CheckDlgButton
DrawFocusRect
DestroyMenu
CheckMenuRadioItem
CheckMenuItem
SetWindowRgn
DdeAddData
BeginPaint
TabbedTextOutA
AppendMenuA
SetMenuDefaultItem
AttachThreadInput
CopyIcon
SendMessageA
GetDlgItemTextA
gdi32
BitBlt
CreateDIBPatternBrush
GetDCOrgEx
ExtFloodFill
CreateRectRgn
EndDoc
CreateFontIndirectA
GetROP2
GetPixel
GetPixelFormat
AnimatePalette
DescribePixelFormat
GetObjectA
CreateSolidBrush
GetMapMode
GetTextColor
CopyEnhMetaFileA
GetDCPenColor
GetPolyFillMode
DeleteObject
GetBrushOrgEx
DeleteEnhMetaFile
CreateFontIndirectW
comdlg32
ChooseColorW
ole32
CoInitialize
oleaut32
VariantChangeType
VariantInit
SysAllocStringLen
pdh
PdhCloseQuery
PdhCloseLog
PdhUpdateLogA
PdhOpenLogW
PdhAddCounterW
PdhOpenQueryW
Sections
.text Size: 187KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ