Static task
static1
Behavioral task
behavioral1
Sample
14c5dfcca3292bded8dc77f2a10257af_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
14c5dfcca3292bded8dc77f2a10257af_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14c5dfcca3292bded8dc77f2a10257af_JaffaCakes118
-
Size
368KB
-
MD5
14c5dfcca3292bded8dc77f2a10257af
-
SHA1
8d2e0caf33028a0e150038fc3a7681e253381276
-
SHA256
c64d800227a1074db8355f98e0c9bad7d5394e7f16932bf82069bf6e9b353584
-
SHA512
64f0b5109c1ad44752a2c99579d3dac3859588a432db246cb02e09d43c5b2e56977cf7c02929211aa075e41dee8e6874c1ac989d2903e2b6d23afc4fdd8395a4
-
SSDEEP
6144:TZqAKr+KR0Xa/3UVk0tKTvpOk5L9GA/AFVoJ8+qo2vF7pqtrstQv8ePAZEul/rEo:1q2KR022k08bpHJ0AYFa8+d2aWtQv8eE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14c5dfcca3292bded8dc77f2a10257af_JaffaCakes118
Files
-
14c5dfcca3292bded8dc77f2a10257af_JaffaCakes118.exe windows:4 windows x86 arch:x86
723bca7ed35ff0afba2c9be14a811353
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysFreeString
SysStringLen
SysAllocString
SysAllocStringLen
kernel32
SetFileTime
FindClose
IsDebuggerPresent
GetProcAddress
GetLocalTime
GlobalUnlock
IsValidCodePage
LocalFree
LocalAlloc
HeapDestroy
QueryPerformanceCounter
VirtualProtect
lstrcpynA
FindNextFileW
SetEndOfFile
GetConsoleMode
GetVersionExW
InterlockedExchange
InterlockedIncrement
RaiseException
ResetEvent
FlushFileBuffers
DeleteFileA
WriteConsoleW
GetStringTypeA
FreeLibrary
FindResourceW
WriteConsoleA
HeapReAlloc
VirtualAlloc
Sleep
GetVersionExA
GetCPInfo
InitializeCriticalSection
CloseHandle
VirtualFree
HeapAlloc
WriteFile
LeaveCriticalSection
GetModuleHandleA
FindResourceA
LoadLibraryA
TlsFree
InterlockedCompareExchange
InterlockedDecrement
GetSystemTimeAsFileTime
GetCommandLineW
FreeEnvironmentStringsA
GetStringTypeW
SetLastError
EnterCriticalSection
UnhandledExceptionFilter
GetSystemDirectoryA
GetCommandLineA
GetConsoleOutputCP
LockResource
GlobalFree
GetStartupInfoA
FindNextFileA
DuplicateHandle
SetErrorMode
FindFirstFileW
SetEvent
FindFirstFileA
MultiByteToWideChar
GetOEMCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetConsoleCP
ReleaseMutex
CreateFileW
GetProcessHeap
GetModuleFileNameA
SetFilePointer
GetTickCount
GetFullPathNameA
WaitForSingleObject
GetVersion
CreateEventA
CreateProcessW
SetFileAttributesA
DeleteCriticalSection
UnmapViewOfFile
MulDiv
CompareStringA
WideCharToMultiByte
lstrlenA
WaitForMultipleObjects
LCMapStringA
LCMapStringW
lstrcmpA
lstrcmpiA
TerminateProcess
CreateFileA
CreateFileMappingA
FormatMessageA
FormatMessageW
GetLastError
GetFileType
GetModuleFileNameW
TlsAlloc
GetModuleHandleW
lstrlenW
ReadFile
GetFileSize
CreateThread
HeapCreate
VirtualQuery
HeapSize
GetTimeZoneInformation
GetThreadLocale
GetExitCodeProcess
GetStdHandle
GetCurrentProcessId
GetEnvironmentStrings
SetUnhandledExceptionFilter
TlsSetValue
GlobalLock
LoadResource
GetFileAttributesW
GetSystemInfo
GetACP
HeapFree
TlsGetValue
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcess
ExitProcess
LoadLibraryExW
user32
BeginPaint
CallWindowProcA
EndDialog
ShowWindow
ScreenToClient
GetWindowRect
SetWindowLongA
IsWindowVisible
EnableWindow
TranslateMessage
GetClientRect
SendMessageA
GetCursorPos
PostQuitMessage
MessageBoxA
GetDC
EnableMenuItem
LoadCursorA
DestroyWindow
SetTimer
PostMessageA
SetWindowTextA
GetWindowLongA
ReleaseDC
FillRect
GetParent
GetWindow
ClientToScreen
SetFocus
GetDesktopWindow
GetSysColor
DefWindowProcA
GetDlgItem
GetSystemMetrics
CreateWindowExA
IsWindowEnabled
SetCursor
InvalidateRect
EndPaint
KillTimer
SetWindowPos
advapi32
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
Sections
iuwuug Size: 368KB - Virtual size: 367KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE