Static task
static1
Behavioral task
behavioral1
Sample
14c4e1e346d1c76cc158244cb561c0a9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14c4e1e346d1c76cc158244cb561c0a9_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
14c4e1e346d1c76cc158244cb561c0a9_JaffaCakes118
-
Size
46KB
-
MD5
14c4e1e346d1c76cc158244cb561c0a9
-
SHA1
571e902d6bade644f8386ea26e1e11704cb54228
-
SHA256
2412d974a258915fa066f1f3cd6ebe40e34e6caef7f86dedf53953b8741d6317
-
SHA512
c6a434efd632fe1c7c0dafa20702d848222ed23de5cc817f1d71353ad304a9973e7de5ebc0845e764e318df7b6ef0984f26c79b221c0aa25b10b943a6d4b3e97
-
SSDEEP
768:UFhLCs5mWbwpUGgrs5Vlj0+p3hMuCLys6hJGG5sg8QIAg3E6IUW+UEh1pB4SWQ:UFh+s2pbgrs5VljPhLCLyvhf8Q7g3E6v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14c4e1e346d1c76cc158244cb561c0a9_JaffaCakes118
Files
-
14c4e1e346d1c76cc158244cb561c0a9_JaffaCakes118.exe windows:5 windows x86 arch:x86
c91dccc36e548cfb244f0d67f8e24dd7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClipboardData
SetProcessWindowStation
GetWindowTextW
PeekMessageW
GetWindowLongW
DispatchMessageW
CloseDesktop
GetDlgItemTextW
GetForegroundWindow
GetMessageA
GetDlgItem
GetWindowThreadProcessId
GetKeyState
GetCursorPos
EndDialog
SendMessageW
DrawIcon
CloseWindowStation
OpenWindowStationA
LoadCursorW
SetThreadDesktop
PeekMessageA
ExitWindowsEx
FindWindowExW
GetClassNameW
GetIconInfo
ToUnicode
GetKeyboardState
GetMessageW
MsgWaitForMultipleObjects
OpenDesktopA
CharLowerBuffA
GetDlgItemTextA
kernel32
MoveFileExW
MapViewOfFile
FlushFileBuffers
SetFileTime
GetVersionExW
GetComputerNameW
WriteProcessMemory
IsBadReadPtr
SetEvent
GlobalLock
OpenProcess
GetThreadPriority
CreateEventW
SetEndOfFile
CopyFileW
ReleaseMutex
GetUserDefaultUILanguage
SetFileAttributesW
GetProcessHeap
GetCurrentProcessId
lstrcatW
GetSystemTimeAsFileTime
GetCurrentThreadId
DeleteFileW
GetLocalTime
UnmapViewOfFile
GetFileSizeEx
lstrcpyW
SetLastError
GetFileTime
MultiByteToWideChar
GetExitCodeProcess
lstrcmpiA
CreateFileW
FindFirstFileW
ExpandEnvironmentStringsW
HeapAlloc
lstrcpyA
GetFileSize
FindResourceW
DisconnectNamedPipe
GetModuleFileNameA
HeapFree
FindClose
CreateDirectoryW
GetProcessTimes
GetDriveTypeW
GetTimeZoneInformation
GetModuleHandleA
InitializeCriticalSection
HeapReAlloc
OpenMutexW
lstrlenW
ResetEvent
FindNextFileW
GetTempPathW
WideCharToMultiByte
GetTempFileNameW
Sections
.whsxud Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gxgf Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.otgdyx Size: 7KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ