h:\bwomxmbooh\otssyqyw\emnku\qodgivuksa\eoykd
Static task
static1
Behavioral task
behavioral1
Sample
4187389c3ace1a2c4598c47fe0af77f9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4187389c3ace1a2c4598c47fe0af77f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4187389c3ace1a2c4598c47fe0af77f9_JaffaCakes118
-
Size
724KB
-
MD5
4187389c3ace1a2c4598c47fe0af77f9
-
SHA1
7422fe6d58a6915aa54eaff48dc5255e7e4e1a49
-
SHA256
5ded98b39032321fa30525b42b47cb61fbb030b6fa82b6ade501a473e7bf3a3f
-
SHA512
408400429ff6f01e5fcec7f889285f04b3e9d2accb554b50ab7d9f7ea67b47d1da51b9e339426ad58f2e3b452ce433f02a9fe17e22afff57f92d726e5dd4bda8
-
SSDEEP
12288:gjAvs/N38JS9S4Jq8CfHh0DXVNCeqqgb8W4FglqbvjT1NaF2OHnaCJimTVTz0KdL:AfNl9NBiqDX/CeFgYbcqbX+DnriQXnup
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4187389c3ace1a2c4598c47fe0af77f9_JaffaCakes118
Files
-
4187389c3ace1a2c4598c47fe0af77f9_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ac87548b11f61d36ceb3e3a7111e1d7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
TlsFree
LeaveCriticalSection
GetProcAddress
CompareStringA
EnterCriticalSection
IsDebuggerPresent
FlushInstructionCache
GetStringTypeA
SetEnvironmentVariableA
WideCharToMultiByte
HeapFree
SetFileAttributesA
EnumSystemLocalesA
GlobalDeleteAtom
GetModuleFileNameW
GetConsoleMode
GetProcessHeap
CloseHandle
WriteConsoleA
SetHandleCount
GetStartupInfoW
GetLocaleInfoA
FreeEnvironmentStringsW
MultiByteToWideChar
TerminateProcess
SetCriticalSectionSpinCount
QueryPerformanceCounter
CopyFileA
UnhandledExceptionFilter
SetConsoleTitleA
GetCurrentThread
GetConsoleOutputCP
GetModuleFileNameA
SetFilePointer
GetEnvironmentStringsW
GetCPInfo
GetVersion
FindNextChangeNotification
GetTimeFormatA
TlsSetValue
GetStdHandle
GetConsoleCP
GetCalendarInfoW
InterlockedExchange
InterlockedIncrement
GetCurrentThreadId
HeapDestroy
DeleteCriticalSection
ReadFile
Sleep
SetConsoleCtrlHandler
LoadLibraryA
ExitProcess
TlsAlloc
VirtualQuery
GetTimeZoneInformation
GetAtomNameA
WriteFile
InitializeCriticalSection
FlushFileBuffers
GetCompressedFileSizeA
GetOEMCP
OpenMutexA
FlushConsoleInputBuffer
GetEnvironmentStrings
LCMapStringW
SetUnhandledExceptionFilter
GetVersionExA
DosDateTimeToFileTime
HeapAlloc
GetSystemTimeAsFileTime
VirtualAlloc
TryEnterCriticalSection
EnumCalendarInfoExA
GetDateFormatA
GetCompressedFileSizeW
GetACP
GetStringTypeW
CommConfigDialogW
CompareStringW
TlsGetValue
FreeLibrary
SetStdHandle
LocalCompact
IsValidCodePage
GetUserDefaultLCID
CreateFileA
GetTickCount
IsValidLocale
SetSystemTime
GetCurrentProcess
WriteConsoleW
CreateMutexW
GetCurrentProcessId
GetModuleHandleA
ResumeThread
GetStartupInfoA
LCMapStringA
GetFileType
HeapSize
HeapReAlloc
GetLocaleInfoW
FreeEnvironmentStringsA
GetExitCodeProcess
HeapCreate
SetLastError
OpenWaitableTimerA
WritePrivateProfileStringW
VirtualFree
GlobalAlloc
RtlUnwind
GetTimeFormatW
GetCommandLineA
CreateMutexA
WritePrivateProfileStringA
InterlockedDecrement
GetCommandLineW
user32
WaitForInputIdle
DefWindowProcA
GetSysColorBrush
OemToCharBuffA
MessageBoxA
KillTimer
ReuseDDElParam
DlgDirListComboBoxW
SetMessageExtraInfo
RegisterClassA
OemToCharBuffW
CallWindowProcA
CreateWindowExA
FindWindowA
EnumDesktopsA
CharPrevW
RegisterClassExA
EnumPropsW
DestroyWindow
GetScrollRange
TabbedTextOutW
CopyAcceleratorTableW
UpdateWindow
GetKeyState
ShowWindow
SetLastErrorEx
comctl32
ImageList_SetDragCursorImage
InitCommonControlsEx
CreateStatusWindowA
ImageList_DragMove
ImageList_Read
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 456KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ