Static task
static1
Behavioral task
behavioral1
Sample
59aa1d5b65f1ce5bb33e3e568ce2245f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
59aa1d5b65f1ce5bb33e3e568ce2245f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
59aa1d5b65f1ce5bb33e3e568ce2245f_JaffaCakes118
-
Size
388KB
-
MD5
59aa1d5b65f1ce5bb33e3e568ce2245f
-
SHA1
6098b30855d94e6fbf7660a84631a67fe32ab038
-
SHA256
c04bd8050d9545f341b027e862240efef0dfe1782fe594906d0f925a67557a3c
-
SHA512
68e67a2dc405e155694525f628d9f5fab5f44e7cec4e4843bbfc5eb074f6b3253a30a24b824d6f70cba7a406bc0ed042c06f16a4a6197ff72f043fc116322051
-
SSDEEP
12288:TxYwF9CyGosL5mNYBnZXdx2X9J45SLgASCbNSorJ:TawF9Ios9+8ZGNWySCbNTt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59aa1d5b65f1ce5bb33e3e568ce2245f_JaffaCakes118
Files
-
59aa1d5b65f1ce5bb33e3e568ce2245f_JaffaCakes118.exe windows:4 windows x86 arch:x86
bfe25fc53346b8d03e1f11ea70ae3266
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CloseWindow
GetSystemMetrics
ChangeMenuW
LoadIconA
EnumChildWindows
EnumDisplaySettingsW
MonitorFromPoint
TranslateAcceleratorW
TileChildWindows
GetSubMenu
CharLowerBuffW
EnumPropsW
DestroyAcceleratorTable
DestroyWindow
RegisterClassExA
EnumDisplayMonitors
SetWindowTextW
DrawAnimatedRects
CharNextA
UnloadKeyboardLayout
FindWindowW
SetWindowRgn
WINNLSEnableIME
EndPaint
ModifyMenuW
CharToOemBuffA
DdeQueryStringA
WINNLSGetEnableStatus
CheckMenuRadioItem
GetMonitorInfoW
GetUserObjectSecurity
DefWindowProcA
LoadBitmapW
DdeAccessData
SetMenuItemBitmaps
PostQuitMessage
GetMenuCheckMarkDimensions
GetClipCursor
DispatchMessageA
MessageBoxExW
MessageBoxA
GetScrollBarInfo
DdeFreeStringHandle
ShowWindow
CopyAcceleratorTableW
CreateWindowStationA
FindWindowA
GetDialogBaseUnits
DrawTextExA
SetForegroundWindow
RegisterClassA
DefMDIChildProcA
PaintDesktop
GetClipboardFormatNameA
ShowCaret
EnumDisplayDevicesA
InsertMenuItemW
EnableScrollBar
WindowFromPoint
DdeCreateStringHandleW
CreateWindowExW
MessageBoxExA
kernel32
FlushFileBuffers
HeapSize
IsBadWritePtr
GetTickCount
LeaveCriticalSection
GetCurrentProcessId
GetStringTypeW
FlushConsoleInputBuffer
GetProcAddress
TlsGetValue
TlsAlloc
GetLocaleInfoW
OpenProcess
EnumResourceNamesW
CreateMutexA
TlsSetValue
GetSystemInfo
Sleep
VirtualProtect
HeapAlloc
InitializeCriticalSection
GetStdHandle
GetCommandLineA
CloseHandle
WriteFile
FreeEnvironmentStringsA
GetVersionExA
DeleteCriticalSection
SetFilePointer
IsValidLocale
VirtualQuery
GetCurrentProcess
FreeEnvironmentStringsW
QueryPerformanceCounter
HeapLock
WaitCommEvent
GlobalFix
GetStringTypeExW
UnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetPrivateProfileStringA
GetLastError
LocalHandle
GetFullPathNameW
CreateDirectoryA
GetModuleFileNameA
GetCommandLineW
GetStartupInfoA
HeapFree
WideCharToMultiByte
RtlUnwind
GetTimeZoneInformation
IsValidCodePage
OpenMutexA
GetCurrentThreadId
SetHandleCount
GetStartupInfoW
LCMapStringW
SetLastError
CreateSemaphoreW
TerminateProcess
GetCPInfo
HeapDestroy
GetFileType
LCMapStringA
GetACP
InterlockedExchange
GlobalGetAtomNameW
GetTimeFormatA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
HeapCreate
EnumSystemLocalesA
GetEnvironmentStrings
GetUserDefaultLCID
VirtualFree
InterlockedIncrement
MultiByteToWideChar
EnterCriticalSection
GetDateFormatA
CompareStringW
ReadFile
GetCurrentThread
HeapReAlloc
LoadLibraryA
TlsFree
SetStdHandle
GetStringTypeA
CompareStringA
GetLocaleInfoA
SetEnvironmentVariableA
GetModuleFileNameW
CreateDirectoryExA
VirtualAlloc
ExpandEnvironmentStringsA
GetOEMCP
ExitProcess
GetModuleHandleA
comdlg32
GetFileTitleA
GetSaveFileNameA
PrintDlgW
comctl32
CreatePropertySheetPageW
MakeDragList
ImageList_DragMove
CreateStatusWindowW
ImageList_GetFlags
InitCommonControlsEx
ImageList_EndDrag
CreateStatusWindowA
ImageList_SetImageCount
ImageList_Destroy
ImageList_SetIconSize
ImageList_DragEnter
ImageList_SetBkColor
Sections
.text Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ