Static task
static1
Behavioral task
behavioral1
Sample
32f7e572461c85d52dd2bc761c926a86_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32f7e572461c85d52dd2bc761c926a86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32f7e572461c85d52dd2bc761c926a86_JaffaCakes118
-
Size
629KB
-
MD5
32f7e572461c85d52dd2bc761c926a86
-
SHA1
2f686794a75a754803ab42df88d597984fbd8b1b
-
SHA256
3c045e66f229c8b34033c98d01ceea5876a49dda525db2549ee3153524ba2842
-
SHA512
705b6e34cbaf80bd7c7f1b13ee049a7241991ec1e7696c9299d696f105b2f724a2b69c1e658c5ed03718c5d9294886dce91a396083b185736f6cb751660d3dcf
-
SSDEEP
12288:6cz5NYzzPGre9sEDSpGTKU+Jbn0Qz84GCWzgJrvjgaDf:p5mzzH8Jbn0y5GX+rvEaDf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32f7e572461c85d52dd2bc761c926a86_JaffaCakes118
Files
-
32f7e572461c85d52dd2bc761c926a86_JaffaCakes118.exe windows:4 windows x86 arch:x86
fbaee9e3327c41d6c704a9e41fe3d082
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetOpenFileNameA
PrintDlgA
PrintDlgW
gdi32
EnumObjects
ExtCreatePen
SetPixel
GetArcDirection
SetWindowExtEx
TextOutA
GetPolyFillMode
GetLogColorSpaceW
SetViewportExtEx
ScaleWindowExtEx
PlayEnhMetaFileRecord
GetTextCharsetInfo
GetViewportExtEx
PtInRegion
Arc
EnableEUDC
GetTextExtentPointW
StrokeAndFillPath
SetBkColor
GetDeviceGammaRamp
PatBlt
EnumMetaFile
ScaleViewportExtEx
wininet
InternetConnectA
shell32
FreeIconList
ShellExecuteExA
comctl32
InitCommonControlsEx
user32
SystemParametersInfoA
RegisterClassExA
CreatePopupMenu
BroadcastSystemMessageW
WinHelpW
RegisterClassA
kernel32
SetUnhandledExceptionFilter
GetCompressedFileSizeW
IsValidCodePage
GetLocaleInfoA
ReadFile
GetStartupInfoA
InterlockedExchange
lstrcmpi
GetStringTypeA
LeaveCriticalSection
WriteConsoleW
OpenMutexA
SetConsoleCtrlHandler
CompareStringA
GetLocaleInfoW
HeapFree
LocalFileTimeToFileTime
HeapCreate
GetSystemTimeAsFileTime
GetCurrentProcess
CompareStringW
GlobalSize
SetStdHandle
CreateMutexA
FreeEnvironmentStringsW
GetTimeZoneInformation
LCMapStringW
FreeLibrary
ExitProcess
VirtualFree
ReadConsoleOutputCharacterW
GetOEMCP
TlsFree
GetUserDefaultLCID
GetModuleFileNameA
GetProcAddress
VirtualAlloc
IsDebuggerPresent
WriteFile
TlsSetValue
GetModuleHandleW
LocalSize
GetFileType
GetTimeFormatA
DeleteCriticalSection
WideCharToMultiByte
GetCompressedFileSizeA
GetACP
ReleaseSemaphore
UnhandledExceptionFilter
GetConsoleOutputCP
SetHandleCount
InterlockedDecrement
WriteConsoleA
GetTickCount
GetPrivateProfileSectionNamesW
GetConsoleCP
HeapAlloc
GetCPInfo
GetCurrentThread
CreateDirectoryExA
Sleep
FreeEnvironmentStringsA
HeapDestroy
EnumResourceNamesW
CreateFileA
IsValidLocale
GetEnvironmentStrings
GetEnvironmentStringsW
TlsGetValue
EnumSystemLocalesA
SetEnvironmentVariableA
GetModuleHandleA
GetDateFormatA
SetLastError
TlsAlloc
GetCommandLineA
VirtualQuery
LocalFree
LoadLibraryExW
LoadLibraryA
RtlUnwind
QueryPerformanceCounter
FlushFileBuffers
MultiByteToWideChar
HeapReAlloc
InitializeCriticalSectionAndSpinCount
TerminateProcess
GetLastError
RtlFillMemory
FindNextChangeNotification
GetCurrentThreadId
LCMapStringA
GetConsoleMode
GetCurrentProcessId
HeapSize
InterlockedIncrement
GetStdHandle
CloseHandle
GetStringTypeW
EnterCriticalSection
SetFilePointer
FindResourceExA
Sections
.text Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ