Static task
static1
Behavioral task
behavioral1
Sample
19b5179c7c5f46060b6c2bb41467dd20_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
19b5179c7c5f46060b6c2bb41467dd20_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19b5179c7c5f46060b6c2bb41467dd20_JaffaCakes118
-
Size
158KB
-
MD5
19b5179c7c5f46060b6c2bb41467dd20
-
SHA1
0266c2327e3f56297959e9d31281be0531181850
-
SHA256
ba885ae4da752359a255d39d06d0c506c820af4806ddbeaca930d1a83d735639
-
SHA512
b34b9e70d9568be01718f7d2696009c23a862a9e8a5d8365f7c6d76ab3b9f415de4614fa705888f6087625e0cafe7bb87a2d4e07a4340cb437bae4ecf429d98f
-
SSDEEP
3072:N92XFKXwGQZm5H025xhJIHRnX9nD+5bDwsXvw:N9eJGUEU2NJIHZ9nDGbfY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19b5179c7c5f46060b6c2bb41467dd20_JaffaCakes118
Files
-
19b5179c7c5f46060b6c2bb41467dd20_JaffaCakes118.exe windows:1 windows x86 arch:x86
0ddeec26945ded035ae86905399f8beb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetClassLongA
GetClassNameA
CreateMenu
GetDlgItem
CheckMenuRadioItem
SetForegroundWindow
IsDialogMessageA
SetScrollInfo
RegisterClassExA
LoadAcceleratorsA
DestroyIcon
CheckDlgButton
FindWindowExA
KillTimer
SetWindowLongA
CheckMenuItem
CreateWindowExA
GetWindowLongA
DialogBoxIndirectParamA
TrackPopupMenuEx
SetTimer
SetCursor
ModifyMenuA
PostQuitMessage
GetCapture
DestroyWindow
InsertMenuA
LoadMenuA
LoadCursorA
RegisterWindowMessageA
GetFocus
RegisterClassA
CopyRect
AppendMenuA
DispatchMessageA
GetDlgCtrlID
DeferWindowPos
GetUpdateRgn
GetWindowTextA
GetMenu
EndPaint
CallWindowProcA
MapWindowPoints
ScrollWindowEx
TranslateAcceleratorA
CheckRadioButton
GetMessageA
SetCapture
IntersectRect
GetPropA
SendMessageTimeoutA
msvcrt
_lseek
isprint
rewind
_adj_fprem1
_expand
_cabs
_wmktemp
_spawnv
rand
_wstrtime
_mbsrev
_toupper
_adj_fdivr_m32
_adj_fprem
wcscspn
_controlfp
_wchdir
_nextafter
_write
_scwprintf
_snwscanf
vfprintf
pow
ctime
fwprintf
_strdup
_tzset
strchr
_ismbbkalnum
_wgetenv
wcscat
_mbsnbcmp
_logb
setlocale
_inpd
_XcptFilter
_wremove
_strnicmp
_acmdln
_safe_fprem1
__setusermatherr
_aligned_free
_i64toa
_ismbbalpha
__getmainargs
__p__commode
_rotr
_wcslwr
_strcmpi
_getmaxstdio
_ismbcprint
_wcstoui64
wctomb
_wcsnicoll
wcsspn
_set_sbh_threshold
isxdigit
memcpy
_wpgmptr
__set_app_type
_except_handler3
atan2
getchar
_sys_errlist
_wexecle
_initterm
atan
_ui64tow
strftime
remove
_winmajor
_adjust_fdiv
fsetpos
floor
_mbctoupper
__p__fmode
_wfindnext64
_strnset
strcat
_exit
_wmkdir
_longjmpex
exit
_vscprintf
_pipe
kernel32
GlobalUnlock
GetProcessWorkingSetSize
InterlockedDecrement
GetStringTypeA
VirtualQueryEx
GetTimeFormatA
CreateProcessA
GetComputerNameW
LoadResource
lstrcmpA
FindClose
SetUnhandledExceptionFilter
TlsGetValue
SetEndOfFile
SetPriorityClass
GetEnvironmentStringsW
GetEnvironmentStrings
GetFileType
IsDebuggerPresent
HeapAlloc
GetConsoleOutputCP
TlsSetValue
FileTimeToLocalFileTime
GetCurrentThread
IsValidCodePage
LocalFree
GetModuleHandleA
MapViewOfFile
GetCommandLineW
GetOEMCP
GetDriveTypeA
SetProcessWorkingSetSize
GetCPInfo
GetCurrentThreadId
GlobalAddAtomA
LocalAlloc
SetFilePointer
GetCommandLineA
GetLocaleInfoA
GetLastError
CreateFileA
InitializeCriticalSection
FindResourceA
LCMapStringW
GetCurrentProcessId
ResumeThread
GetCurrentProcess
SetThreadAffinityMask
SetHandleCount
GetExitCodeThread
LockResource
RaiseException
WaitForMultipleObjects
GetStartupInfoA
lstrcatA
GetDateFormatA
GetVersion
WideCharToMultiByte
GetModuleHandleW
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ