Static task
static1
Behavioral task
behavioral1
Sample
1bb170c966fc7a8a0f08cf92de259300_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1bb170c966fc7a8a0f08cf92de259300_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1bb170c966fc7a8a0f08cf92de259300_JaffaCakes118
-
Size
725KB
-
MD5
1bb170c966fc7a8a0f08cf92de259300
-
SHA1
71a21d6fe73ca877a163a2a823ba6a8acc2da9a0
-
SHA256
33c97d51bda8f3c4776df447a06644760b662a19b238c155247c5649702f1649
-
SHA512
aac4405e4626cef29190dfbdc8f7e4b18a4cb8b3e43f9656bc071dc3b03c49ce1f73e8a4910370f154f7be7196216792b1627a6f90f0588ff37e99f1cbd5c5e4
-
SSDEEP
12288:TFdnvaG5nIYIoKgxu064+vJTba0n3Uy2Ic5BXAXiKm4LuvnPCS/S:TFdniGptIoKO/SJlkZIPXit4w5/S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bb170c966fc7a8a0f08cf92de259300_JaffaCakes118
Files
-
1bb170c966fc7a8a0f08cf92de259300_JaffaCakes118.exe windows:5 windows x86 arch:x86
07879c7b81ca2c7fd142dfe7b3001714
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleA
lstrcmpiW
LoadLibraryW
GetLastError
LocalFree
DeleteCriticalSection
InitializeCriticalSection
Sleep
DeleteCriticalSection
SetLastError
lstrcmpiW
LeaveCriticalSection
HeapAlloc
lstrcmpiW
GetModuleFileNameW
HeapDestroy
HeapAlloc
QueryPerformanceCounter
QueryPerformanceCounter
GetProcessHeap
GetSystemTimeAsFileTime
CreateThread
GetProcAddress
VirtualAlloc
GetProcessHeap
MultiByteToWideChar
CreateFileW
InitializeCriticalSection
DeleteCriticalSection
InterlockedExchange
HeapFree
GetVersionExA
GetVersionExA
GetCurrentThreadId
GetProcessHeap
QueryPerformanceCounter
EnterCriticalSection
HeapAlloc
LoadLibraryW
GetVersionExA
CreateFileW
GetModuleFileNameW
lstrcmpiW
GetProcessHeap
HeapFree
HeapDestroy
VirtualAlloc
DeleteCriticalSection
CreateFileW
GetSystemTimeAsFileTime
GetModuleFileNameA
HeapFree
user32
PostMessageW
LoadStringW
SetWindowTextW
TranslateMessage
ShowWindow
SetForegroundWindow
GetDesktopWindow
SetTimer
DispatchMessageW
EndDialog
GetFocus
LoadCursorW
LoadCursorW
EndDialog
ReleaseDC
GetSysColor
SetTimer
SendDlgItemMessageW
EndPaint
GetFocus
GetSystemMetrics
DialogBoxParamW
KillTimer
SendMessageW
ReleaseDC
EndDialog
CharNextW
IsWindow
EndPaint
BeginPaint
IsDlgButtonChecked
SetWindowTextW
DialogBoxParamW
MessageBoxW
GetDlgItem
PostMessageW
SetForegroundWindow
GetDesktopWindow
GetDlgItem
KillTimer
SendMessageW
DialogBoxParamW
BeginPaint
SetDlgItemTextW
InvalidateRect
wsprintfA
PeekMessageW
EndPaint
SetWindowTextW
DialogBoxParamW
SetForegroundWindow
SetWindowTextW
wsprintfA
SetWindowTextW
GetWindowRect
SetForegroundWindow
Sections
.text Size: 719KB - Virtual size: 1.4MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ