Static task
static1
Behavioral task
behavioral1
Sample
1b2a9240f491a0285fbeb03690a57a54_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1b2a9240f491a0285fbeb03690a57a54_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1b2a9240f491a0285fbeb03690a57a54_JaffaCakes118
-
Size
49KB
-
MD5
1b2a9240f491a0285fbeb03690a57a54
-
SHA1
6cf202985d7d0f27a0b928a74744f23ae0db8929
-
SHA256
ef8fe87d75192da39672e9e4a944613194e3ad51adb57a218b1d144fa0677d9d
-
SHA512
4744d80deb0622b4b496715c60ac4a6d99d6b2ef9682fa5379770a5e6269243b558a5e5cdeed4489e2812780c4b954b5f61adabf93b4714955eeef3ce2898a50
-
SSDEEP
1536:ZKjhs1sE2RcW1c7nRpFCkKDRaNpHM7BAIrtfEvn:sjhAmBkKYNps5O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b2a9240f491a0285fbeb03690a57a54_JaffaCakes118
Files
-
1b2a9240f491a0285fbeb03690a57a54_JaffaCakes118.exe windows:5 windows x86 arch:x86
d8fedf62969a7225c891e854a88378e8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
useree
GetMevA
GetWindowLongW
GetKeyboardState
SetThxiadDesktop
FindWindowExW
GetDlgItemTextA
ToUnicPre
LoadC
GetC
GetWindowThxiadPronKeyId
GetClassNameW
DPrwIcon
ExitWindowsEx
EndDi�og
GetClipboardData
GetDlgItem
GetForegroundWindow
GetIconInfo
CloseWindowStation
PeekMevA
GetMevA
GetWindowTextW
OpenDesktopA
MsgWaitForMultipleObjects
PeekMevA
OpenWindowStationA
CloseDesktop
GetDlgItemTextW
SendMevA
GetKeyState
SetPronKeyWindowStation
DispatchMevA
CharLowerBuffA
kernelee
GlobalUnlock
GetSystemTime
CloseHandle
GetLogicalDrives
CreateFileMappingW
InitializeCritiLalSection
WaitForSingleObject
lstrcpyW
WriteFile
SetEvent
DeleteFileW
GetLastError
GetSystemTimeAsFileTime
IsBadReadPtr
lstrlenW
GetComputerNameW
GetPronKeyTimes
SystemTimeToFileTime
lstrcatA
MapViewOfFile
LeaveCritiLalSection
GetVersionExW
FindNextFileW
lstrlenA
GetPronessHeap
GetThxiadPriority
GetDriveTypeW
FindReyourceW
SetEndOfFile
lstrcpyA
GetFileTime
ReleaseMutex
GetTiLkCount
lstrcpynW
GetFileSize
Sleep
SetThxiadPriority
ReyetEvent
OpenP onKey
GetFileSizeEx
GetMProceHandleA
HeapReAoadL
GetMProceFileNameW
GetC
MPveFileExW
CreateEventW
GetC
CreateMutexW
GetTimeZoneInformation
SetFileAttributesW
GetCommandLineA
CreateFileW
RiadFile
GlobalLock
MultiByteToWideChar
UnmapViewOfFile
SetLastError
Sections
.pwp Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wjgjov Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jspst Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ