f:\enssdj\eevshj
Static task
static1
Behavioral task
behavioral1
Sample
3f92c52ca7b6f98544f5ba812f8f1475_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f92c52ca7b6f98544f5ba812f8f1475_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f92c52ca7b6f98544f5ba812f8f1475_JaffaCakes118
-
Size
552KB
-
MD5
3f92c52ca7b6f98544f5ba812f8f1475
-
SHA1
fd66160d629686629cb82ad8fd7d435412af0d36
-
SHA256
f6fee2d06d76539220b3b5a5bd388bd66daad08d63969b870bd07d8b397e58d5
-
SHA512
ec54ccb659f71e14e0d7fda12cfb66d5bb955ce708161206bc38992bd5feea8948b1bf652da831adc80df5e0932e845522f4e47be2374a40086483fba1ab622a
-
SSDEEP
12288:Ng8aujRXUyV8mYo92/HXbt47VJCteFLR:Ng8X1zYD+R8e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f92c52ca7b6f98544f5ba812f8f1475_JaffaCakes118
Files
-
3f92c52ca7b6f98544f5ba812f8f1475_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc95d62c48094733600cbfdf979493b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
ShowWindow
RemovePropW
SetMenuItemBitmaps
SetClipboardData
GetWindowTextLengthA
FillRect
DrawIconEx
EnumDisplayDevicesA
GetDlgItemTextW
InvertRect
PackDDElParam
GetShellWindow
CreateWindowExA
CharLowerBuffW
DestroyWindow
CallMsgFilterW
ReplyMessage
MonitorFromWindow
MessageBoxA
GetKeyNameTextW
LoadBitmapW
DdeInitializeA
AppendMenuW
ShowScrollBar
SetCursorPos
RegisterClassA
GetAsyncKeyState
SetDlgItemTextA
MessageBoxExA
IsCharAlphaNumericA
SetClassWord
ChangeMenuA
GetClipboardViewer
GetInputState
TranslateAcceleratorW
wsprintfW
DefWindowProcA
UnhookWindowsHook
DdeCreateDataHandle
OpenWindowStationW
DlgDirSelectComboBoxExW
RegisterClassExA
FreeDDElParam
EnumWindows
OpenClipboard
SendDlgItemMessageA
TranslateAccelerator
kernel32
LCMapStringW
FileTimeToDosDateTime
SetStdHandle
UnhandledExceptionFilter
GetLastError
FlushFileBuffers
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
FreeResource
HeapSize
ReadFile
GetStringTypeA
lstrcmpiW
GetOEMCP
SetHandleCount
GetUserDefaultLCID
GetEnvironmentStringsW
RemoveDirectoryA
ExitProcess
GetMailslotInfo
GetEnvironmentStrings
FindNextFileW
OpenMutexA
HeapDestroy
GetTimeZoneInformation
SleepEx
TlsFree
GetLogicalDriveStringsW
CreateSemaphoreW
DeleteCriticalSection
HeapCreate
GetSystemInfo
GetCalendarInfoA
GetACP
GetStringTypeExA
ReadConsoleOutputA
SetEnvironmentVariableA
IsBadWritePtr
TlsGetValue
WriteFile
VirtualProtect
GetLocaleInfoW
lstrcpyn
GetDriveTypeW
GetModuleFileNameA
CompareStringA
Sleep
GetStartupInfoA
FreeEnvironmentStringsA
CreateMutexA
LoadLibraryA
ReadConsoleW
TerminateProcess
RtlUnwind
GetTimeFormatA
GetFileType
GetModuleHandleA
GetCurrentProcess
GetDateFormatA
OutputDebugStringA
GetThreadPriorityBoost
GetVersionExA
WritePrivateProfileStructW
VirtualFree
TlsAlloc
GetExitCodeProcess
MultiByteToWideChar
LocalAlloc
FreeEnvironmentStringsW
GetThreadPriority
AddAtomA
CompareStringW
lstrcpynW
GetStringTypeExW
SetFilePointer
GetFullPathNameW
GlobalFree
TlsSetValue
GetLocaleInfoA
FindNextChangeNotification
EnumSystemLocalesA
GetCPInfo
InterlockedExchange
VirtualAlloc
GetProcAddress
LCMapStringA
GetCurrentThreadId
CloseHandle
SetLastError
GetVersionExW
HeapReAlloc
LeaveCriticalSection
HeapFree
GetProcAddress
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
GetCommandLineA
InitializeCriticalSection
GetTickCount
GetCompressedFileSizeA
VirtualQuery
EnterCriticalSection
GetSystemDefaultLCID
GetCurrentThread
HeapAlloc
IsValidCodePage
IsValidLocale
TerminateThread
GetStdHandle
QueryPerformanceCounter
WideCharToMultiByte
shell32
RealShellExecuteA
DragQueryFile
SHGetSettings
DoEnvironmentSubstA
comctl32
ImageList_DragMove
InitCommonControlsEx
CreateUpDownControl
CreateToolbarEx
CreateMappedBitmap
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ