Static task
static1
Behavioral task
behavioral1
Sample
19f2d3bfeeb343100fbb1108b4d47bbd_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19f2d3bfeeb343100fbb1108b4d47bbd_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
19f2d3bfeeb343100fbb1108b4d47bbd_JaffaCakes118
-
Size
308KB
-
MD5
19f2d3bfeeb343100fbb1108b4d47bbd
-
SHA1
1f452815c1e6eea35552fbef1cddad8a1c233795
-
SHA256
e7c91ef7ebc94ace0afb9eb3c833f7e108258a733d99207512d3f04e813c8a31
-
SHA512
3c6c0274bb9b3f2d6191f002561bc9d384a72d68e89718f7a9e7cd7d21bff7ca4ead56a5533d39eade6885143f818046f8152e31ef30ff2bfb929c6c10c192d1
-
SSDEEP
6144:XmRll46LCLMPKZuZuTTTiSg7fSGF7i/RxunGoNx1QKO9hOrCGR4:WRTTLbCZuqTG7f8unrFO9hOrT4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19f2d3bfeeb343100fbb1108b4d47bbd_JaffaCakes118
Files
-
19f2d3bfeeb343100fbb1108b4d47bbd_JaffaCakes118.exe windows:4 windows x86 arch:x86
bfb58ae79645ba33a50300dd44f16f5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
lstrcmpiA
lstrlenA
LoadLibraryA
lstrcpynA
OutputDebugStringA
SetLastError
GetLastError
lstrlenW
GetModuleHandleW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
DeactivateActCtx
Sleep
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
GetOEMCP
MultiByteToWideChar
CreateFileW
GetSystemDirectoryW
GetModuleFileNameW
CompareStringW
GetModuleHandleA
LocalAlloc
lstrcmpA
LocalSize
GetLocaleInfoA
FormatMessageA
FreeLibrary
GetProcAddress
GetCommandLineA
VirtualProtect
VirtualFree
DisableThreadLibraryCalls
VirtualAlloc
GetStartupInfoA
user32
IsDlgButtonChecked
GetParent
CreateWindowExA
SetWindowPos
wsprintfA
LoadImageA
GetFocus
EndDialog
GetWindow
ShowWindow
WinHelpA
DialogBoxIndirectParamW
SetDlgItemTextW
LoadIconW
RemovePropW
GetDesktopWindow
SetPropW
MessageBoxW
SetWindowLongW
CheckRadioButton
LoadStringW
GetPropW
GetWindowTextW
SetWindowTextW
MessageBeep
SendDlgItemMessageW
MoveWindow
GetClientRect
SendMessageW
PostMessageW
SendMessageA
SetWindowTextA
GetWindowRect
SetFocus
ScreenToClient
SetDlgItemTextA
GetDlgItemTextA
GetDlgItem
EnableWindow
PostMessageA
GetWindowLongA
LoadStringA
GetSystemMetrics
SetWindowLongA
CheckDlgButton
DialogBoxParamA
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExW
RegOpenKeyW
RegCreateKeyExW
RegDeleteValueW
RegEnumValueW
RegFlushKey
RegSetValueExW
RegOpenKeyExW
RegQueryValueExA
msvcr71
_controlfp
__dllonexit
__set_app_type
__p__fmode
__p__commode
__setusermatherr
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
iswctype
_vsnwprintf
wcsstr
_wcsupr
_wcsicmp
_wtoi
wcschr
memmove
_wtol
free
malloc
_initterm
_adjust_fdiv
memset
_ultow
memcpy
_lock
_except_handler3
_onexit
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ