c:\ejalfl\ih
Static task
static1
Behavioral task
behavioral1
Sample
26e12519eb0e6b6042b4f91e7d07aba3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
26e12519eb0e6b6042b4f91e7d07aba3_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
26e12519eb0e6b6042b4f91e7d07aba3_JaffaCakes118
-
Size
528KB
-
MD5
26e12519eb0e6b6042b4f91e7d07aba3
-
SHA1
f0a9552f335904b88710b1ba3661195591b04c90
-
SHA256
7ee2c18b22429f79f2f9b5b0e17b7cfb9aee4020c283298dd428d798e03097f8
-
SHA512
f3fb4a9ec619861c9071aa4271a85d05bab330bcab95e309c3b2cb166c370e6f876cfee1f4443198e1d635bd0e29b57e44410b0b392922b2e8eaff5fc5b6a554
-
SSDEEP
12288:ZSikR+t3+vTb0J6YafpXia2E21diFwfYvTpoS:7tOq6YafpXBV21cT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26e12519eb0e6b6042b4f91e7d07aba3_JaffaCakes118
Files
-
26e12519eb0e6b6042b4f91e7d07aba3_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c29165e3f589a9b15b991235a3e3504
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_LoadImage
ImageList_Draw
ImageList_DragEnter
ImageList_AddMasked
DestroyPropertySheetPage
ImageList_SetFilter
ImageList_Duplicate
ImageList_Copy
ImageList_Destroy
CreatePropertySheetPageA
InitMUILanguage
CreateToolbarEx
GetEffectiveClientRect
ImageList_GetFlags
CreateMappedBitmap
InitCommonControlsEx
DrawStatusText
ImageList_SetFlags
ImageList_GetDragImage
ImageList_EndDrag
comdlg32
PrintDlgA
ChooseColorA
FindTextA
user32
GetMenuInfo
WinHelpW
MessageBoxA
wsprintfA
GetMessageW
CharToOemA
FindWindowA
GetDlgItemTextW
DestroyWindow
DrawIconEx
CreateMDIWindowW
GetMessageExtraInfo
CreateWindowExW
DefWindowProcW
GetPropW
RemovePropW
BlockInput
ExitWindowsEx
RegisterClassA
SendMessageTimeoutW
RegisterClassExA
OemToCharBuffA
GetClassNameA
DdeQueryStringW
ShowWindow
IsDialogMessage
OemToCharA
kernel32
GetStdHandle
GetConsoleOutputCP
GetCurrentThread
lstrlenA
InitializeCriticalSection
GetCurrentThreadId
GetOEMCP
IsValidLocale
GetTimeFormatA
GetFileType
GetModuleFileNameA
GetEnvironmentStrings
FreeLibrary
SystemTimeToFileTime
OpenMutexA
IsDebuggerPresent
GetEnvironmentStringsW
SetUnhandledExceptionFilter
CreateMutexA
GetLocaleInfoA
GetFileSize
WriteConsoleW
UnhandledExceptionFilter
HeapValidate
WriteConsoleA
VirtualQuery
TerminateProcess
GetProcessHeap
InterlockedIncrement
HeapFree
CreateFileA
TlsGetValue
LCMapStringW
MultiByteToWideChar
SetHandleCount
OutputDebugStringW
VirtualFree
IsValidCodePage
FindClose
ExitProcess
GetLastError
GetACP
FreeEnvironmentStringsA
GetConsoleMode
SetLastError
HeapReAlloc
CreateDirectoryExA
CompareStringA
TlsSetValue
GetTickCount
LoadLibraryA
OpenSemaphoreA
RaiseException
CloseHandle
EnumDateFormatsW
VirtualAlloc
CompareStringW
GetLocaleInfoW
HeapAlloc
GetModuleFileNameW
SetStdHandle
GetStringTypeA
WideCharToMultiByte
SetEnvironmentVariableA
WriteFile
DeleteCriticalSection
GetUserDefaultLCID
GetCommandLineA
GetCurrentProcess
InterlockedDecrement
TlsFree
GetVersionExA
SetFilePointer
GetTimeZoneInformation
GetStartupInfoA
HeapCreate
GetCurrentProcessId
HeapDestroy
InterlockedExchange
GetDateFormatA
LCMapStringA
ReadFile
EnumResourceNamesW
GetStringTypeW
TlsAlloc
IsBadReadPtr
QueryPerformanceCounter
SetConsoleCtrlHandler
FlushFileBuffers
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
RtlUnwind
DebugBreak
GetConsoleCP
OutputDebugStringA
GetCPInfo
LeaveCriticalSection
LoadLibraryW
EnumSystemLocalesA
EnterCriticalSection
FreeEnvironmentStringsW
ExpandEnvironmentStringsW
Sections
.text Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ