c:\ebtlqeq\rm
Static task
static1
Behavioral task
behavioral1
Sample
479d1d729d87360a3544dec344d8455a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
479d1d729d87360a3544dec344d8455a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
479d1d729d87360a3544dec344d8455a_JaffaCakes118
-
Size
444KB
-
MD5
479d1d729d87360a3544dec344d8455a
-
SHA1
2a367b9308ebe201c020db93a4153a67c086b125
-
SHA256
512920a1e9d80e551a044dea298930ef922663e2a2b063afde6adbb9bd424029
-
SHA512
9955f8989535b672e2a02e3a1e75da57a82ae825aa2e3ad5149dcc36bae3641c2a0c252f14b4c77d8fd28bb9d110af7623dd05692386e4d865be04c48f896a46
-
SSDEEP
12288:uXAkGflKcvJHUzpzXdRTaFhUM6ehyLS2it0ocj67kxZMM:mGflSXhleQpDLMM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 479d1d729d87360a3544dec344d8455a_JaffaCakes118
Files
-
479d1d729d87360a3544dec344d8455a_JaffaCakes118.exe windows:4 windows x86 arch:x86
0eabdcb4ad2a3976974f208214609c44
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
gdi32
RectVisible
GetViewportOrgEx
EndPath
GetRegionData
SetPixelFormat
GetLogColorSpaceA
SelectObject
gdiPlaySpoolStream
DeleteMetaFile
SetBoundsRect
SetDIBColorTable
BeginPath
comctl32
ImageList_GetIconSize
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_DragMove
ImageList_SetFlags
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_Remove
GetEffectiveClientRect
ImageList_Write
CreatePropertySheetPage
DestroyPropertySheetPage
ImageList_DragEnter
ImageList_EndDrag
CreateUpDownControl
kernel32
OutputDebugStringW
lstrlenA
HeapFree
SetConsoleCtrlHandler
GetOEMCP
GetEnvironmentStringsW
GetCurrentProcess
HeapDestroy
GetStringTypeA
WriteConsoleA
QueryPerformanceCounter
FlushInstructionCache
VirtualQuery
GetConsoleMode
HeapAlloc
GetTimeZoneInformation
LoadLibraryW
GetDateFormatA
WriteConsoleW
GetProcessShutdownParameters
GetModuleHandleA
WriteConsoleOutputCharacterA
GetLastError
SetHandleCount
GetACP
CreateThread
OutputDebugStringA
UnhandledExceptionFilter
LCMapStringW
TlsSetValue
GetLocaleInfoW
IsBadReadPtr
EnumSystemLocalesA
GetStartupInfoA
HeapReAlloc
DebugBreak
VirtualAlloc
ReadFile
WideCharToMultiByte
SetStdHandle
SetEnvironmentVariableA
GetModuleHandleW
WaitForMultipleObjects
GetSystemTimeAsFileTime
SetFilePointer
GetCommandLineA
GetCurrentThreadId
GetCurrentProcessId
GetProcAddress
IsDebuggerPresent
SetLastError
RtlUnwind
FreeLibrary
lstrcatW
CreateFileA
TerminateProcess
CreateDirectoryExA
InterlockedExchange
CreateMutexA
FreeEnvironmentStringsW
GetConsoleCP
LCMapStringA
GetStartupInfoW
ReleaseSemaphore
GetCommandLineW
GetUserDefaultLCID
SystemTimeToFileTime
OpenMutexA
MultiByteToWideChar
GetLocaleInfoA
CompareStringA
GetFileType
IsValidCodePage
GetNumberFormatA
DeleteCriticalSection
GetProcessHeap
InitializeCriticalSectionAndSpinCount
RaiseException
Sleep
TlsGetValue
LeaveCriticalSection
IsValidLocale
LoadLibraryA
FlushFileBuffers
GetModuleFileNameA
GetStringTypeW
TlsFree
GetModuleFileNameW
InterlockedIncrement
HeapCreate
EnterCriticalSection
GetTimeFormatA
GetProfileSectionA
HeapValidate
GetStdHandle
CompareStringW
EnumCalendarInfoExA
WriteFile
GetTickCount
CloseHandle
GetCPInfo
InterlockedDecrement
VirtualFree
HeapSize
ExitProcess
GetCurrentThread
GetConsoleOutputCP
lstrcmpW
TlsAlloc
SetUnhandledExceptionFilter
user32
InsertMenuItemA
DispatchMessageA
GetCursor
TrackPopupMenu
CreateWindowStationA
UpdateWindow
OpenDesktopW
GetPriorityClipboardFormat
ChangeMenuW
CallMsgFilter
MessageBoxIndirectW
MessageBoxW
CharToOemA
MapVirtualKeyExA
EnableWindow
SetTimer
SendNotifyMessageW
CreateCursor
IntersectRect
PostThreadMessageW
GetAsyncKeyState
GetKeyboardType
GetMenuItemInfoW
SetCaretPos
DialogBoxIndirectParamW
DefWindowProcW
LockWindowUpdate
GetProcessWindowStation
GetClassInfoA
GetClipboardData
InflateRect
GetScrollInfo
CallMsgFilterA
RegisterClipboardFormatW
ShowWindow
FindWindowExA
OpenIcon
RegisterClassA
SwitchDesktop
CreatePopupMenu
GrayStringA
CascadeWindows
InsertMenuItemW
CreateWindowExW
DestroyWindow
RegisterClassExA
DrawIconEx
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ