Static task
static1
Behavioral task
behavioral1
Sample
57531b347491ca0eb1c28d644590acfa_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
57531b347491ca0eb1c28d644590acfa_JaffaCakes118
-
Size
323KB
-
MD5
57531b347491ca0eb1c28d644590acfa
-
SHA1
d093e2e7f5a048b5c58abb212b394f294979fb4d
-
SHA256
33a6d7f3da505bb94079a0f8837e4de0083cf5cd782f665faf0589c290cac930
-
SHA512
4b9c2f5f6ddea17b1c6e1686a3a54279e11bb37eecab561646d919bccd00ebd17bb43d7165a24b6fde645c76242d6c23f0f462c0e7a60d0abe468c9a9f834db3
-
SSDEEP
6144:AvGO3yl828vcPv2yv8vrvvvLvvvLvvvrvvvLvvvrvjvrvTPnbH7fvTv1KkOOU0qy:Q1y6Kl05
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57531b347491ca0eb1c28d644590acfa_JaffaCakes118
Files
-
57531b347491ca0eb1c28d644590acfa_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec65080a0175f0905e863aaa1aee6c93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
RtlUnwind
HeapReAlloc
SetStdHandle
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
GetFullPathNameW
CreateDirectoryW
GetConsoleMode
GetConsoleCP
GetFileType
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetTimeZoneInformation
HeapCreate
FindResourceA
lstrcmpA
lstrlenA
FreeLibrary
LoadResource
SystemTimeToTzSpecificLocalTime
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
GetCommandLineA
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
SizeofResource
CreateEventA
SetDllDirectoryA
IsDBCSLeadByte
lstrcatA
MultiByteToWideChar
lstrlenW
RaiseException
GetLastError
lstrcmpiA
GetProcAddress
WaitForMultipleObjects
GetModuleFileNameA
LoadLibraryExA
CreateMutexA
DeleteCriticalSection
CloseHandle
SetEvent
ResetEvent
CreateThread
lstrcpyA
lstrcpynA
CreateFileA
WriteFile
Sleep
ReadFile
OpenEventA
GetCurrentProcess
GetTickCount
GetVersionExA
GetCurrentProcessId
GetTempPathA
LocalFree
DeleteFileA
FileTimeToSystemTime
FormatMessageW
GetLocalTime
GetCurrentThreadId
PeekNamedPipe
SetHandleInformation
GetExitCodeProcess
CreateProcessA
TerminateProcess
GetUserDefaultUILanguage
GetFileAttributesA
GetStdHandle
LoadLibraryExW
GetModuleHandleExA
GetModuleHandleExW
LoadLibraryW
CreateFileW
SetFilePointerEx
InitializeCriticalSection
ClearCommBreak
WriteProfileStringA
LocalShrink
FillConsoleOutputCharacterA
RemoveDirectoryA
GetComputerNameExA
WaitForSingleObjectEx
FindFirstChangeNotificationA
SetCriticalSectionSpinCount
SetCommMask
AllocConsole
GetComputerNameW
HeapDestroy
AssignProcessToJobObject
SetCommTimeouts
UnregisterWaitEx
lstrcpynW
SetCurrentDirectoryA
SetConsoleCP
GetOverlappedResult
GetLogicalDriveStringsA
GetFileTime
GetPrivateProfileStringW
GetVolumeNameForVolumeMountPointA
FormatMessageA
LocalAlloc
FindClose
FindFirstFileW
FindNextFileW
GetVersion
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetACP
GetOEMCP
SetHandleCount
GetStartupInfoA
VirtualFree
LCMapStringA
GetStringTypeA
LoadLibraryA
FlushFileBuffers
SetFilePointer
GetModuleHandleA
SetErrorMode
user32
LoadCursorFromFileW
AppendMenuW
LockWindowUpdate
GetSysColor
SendMessageCallbackA
InsertMenuItemA
GetKeyboardType
DdeInitializeA
OpenDesktopA
CreateWindowStationA
GetDC
LoadCursorW
LoadIconA
LoadCursorA
GetLastActivePopup
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
gdi32
GetStockObject
CreateHatchBrush
ExtTextOutW
RemoveFontResourceTracking
GetStretchBltMode
GetKerningPairs
SelectClipRgn
SetDIBColorTable
Ellipse
PaintRgn
SaveDC
GetColorSpace
comdlg32
GetSaveFileNameW
advapi32
FreeSid
RegOpenKeyW
GetUserNameA
RegQueryValueExA
shell32
Shell_NotifyIconA
SHGetFolderPathW
ShellExecuteA
ShellHookProc
ExtractAssociatedIconA
SHAppBarMessage
SHGetFolderLocation
SHBindToParent
DragFinish
DragQueryFileAorW
ExtractAssociatedIconExW
ShellExecuteExW
Shell_NotifyIconW
SHGetFileInfoA
ExtractIconExA
SHBrowseForFolderA
ole32
OleCreate
shlwapi
StrRChrW
StrCmpNA
StrRStrIA
winmm
PlaySoundA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ