F:\GROEP
Static task
static1
Behavioral task
behavioral1
Sample
3dbfc41af7ebdf5859f15c521add531c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3dbfc41af7ebdf5859f15c521add531c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3dbfc41af7ebdf5859f15c521add531c_JaffaCakes118
-
Size
485KB
-
MD5
3dbfc41af7ebdf5859f15c521add531c
-
SHA1
ff2c11f5b983d7b1a4d71af78e5df01347775a76
-
SHA256
23099bc61ec98317f60051bba9a89006d69bb396786495e90e47627c1a439514
-
SHA512
9c6f7fe822dbd636c42c704e0b8e8ed5420c6d3730f8a8574a32c07ad8a34740b8e15528974b874611cf04503977edbca3a7f930b1c10066a02a9696c30940b9
-
SSDEEP
12288:E/2FKX1Ul/eD9OWSKAC0EgORdxdMBzpJevfrEUwMwOWmMAbGt:lm1k/e510E6Ncfr3KmTO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dbfc41af7ebdf5859f15c521add531c_JaffaCakes118
Files
-
3dbfc41af7ebdf5859f15c521add531c_JaffaCakes118.exe windows:4 windows x86 arch:x86
466a4fa8f0961fcfa9f60babc14a7049
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
InSendMessage
SetWindowTextW
CreateDesktopA
GetAsyncKeyState
CreateWindowExW
CloseWindow
CheckMenuItem
RegisterHotKey
MessageBoxExW
DefMDIChildProcA
UpdateWindow
IsDialogMessage
IsWindowEnabled
SetShellWindow
RegisterClassA
DdeNameService
GetWindowDC
RegisterClassExA
CreateDesktopW
MessageBoxA
ShowWindow
gdi32
StartDocW
CreateRoundRectRgn
kernel32
SetStdHandle
WriteConsoleA
DeleteCriticalSection
ExitProcess
GetCommandLineA
WaitForSingleObjectEx
GetOEMCP
EnumSystemLocalesA
HeapCreate
CompareStringW
GetTimeFormatA
TlsSetValue
CompareStringA
GetCurrentThreadId
GetDateFormatA
HeapValidate
GetCurrentProcessId
GlobalUnlock
GetCurrentThread
TlsGetValue
TlsFree
CreateSemaphoreA
LCMapStringA
GetTickCount
MultiByteToWideChar
IsDebuggerPresent
RtlUnwind
TlsAlloc
GetEnvironmentStrings
GetACP
GetModuleFileNameA
IsBadReadPtr
GetCommandLineW
CreateMutexA
GetCPInfo
CloseHandle
SetHandleCount
GetStringTypeA
GetModuleHandleA
SetUnhandledExceptionFilter
GetModuleFileNameW
HeapFree
GetProcessHeap
VirtualQuery
OutputDebugStringW
GetStringTypeW
IsValidLocale
SetConsoleTextAttribute
SetConsoleCtrlHandler
SystemTimeToTzSpecificLocalTime
GetProfileSectionW
HeapReAlloc
HeapDestroy
TerminateProcess
HeapAlloc
GetConsoleCP
AllocConsole
GetConsoleMode
GetStartupInfoA
FreeEnvironmentStringsW
SetFilePointer
GetLastError
SetComputerNameA
InterlockedIncrement
WideCharToMultiByte
SetLastError
InitializeCriticalSection
lstrlenA
LeaveCriticalSection
MoveFileExW
WriteConsoleW
DebugBreak
GetStartupInfoW
UnhandledExceptionFilter
GetFullPathNameW
EnterCriticalSection
GetStdHandle
GetTimeZoneInformation
GetProcAddress
GetEnvironmentStringsW
WriteFile
FreeEnvironmentStringsA
LCMapStringW
GetConsoleOutputCP
FlushFileBuffers
VirtualAlloc
IsValidCodePage
HeapSize
GetCurrentProcess
LoadLibraryW
VirtualFree
FreeLibrary
RaiseException
OpenMutexA
GetLocaleInfoA
SetEnvironmentVariableA
InterlockedExchange
GetFileType
CreateFileA
GetSystemTimeAsFileTime
GetVersionExA
QueryPerformanceCounter
GetLocaleInfoW
LoadLibraryA
ReadFile
GetUserDefaultLCID
EnumResourceTypesW
OutputDebugStringA
InterlockedDecrement
advapi32
DuplicateTokenEx
RegCreateKeyW
CryptGetHashParam
LogonUserA
LookupPrivilegeValueW
InitiateSystemShutdownA
CreateServiceW
CryptSetProviderW
RegDeleteKeyW
RegOpenKeyExA
CryptAcquireContextA
RegSetValueExW
CryptSetKeyParam
CryptGetKeyParam
RegEnumValueW
RegEnumKeyW
CryptSignHashA
LookupPrivilegeNameA
CryptSetProvParam
LookupSecurityDescriptorPartsA
CryptReleaseContext
RegSetValueA
comctl32
InitCommonControlsEx
Sections
.text Size: 322KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ