_WndProc@16
Static task
static1
Behavioral task
behavioral1
Sample
5edf93e73283b33de3ac826a39b421d9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5edf93e73283b33de3ac826a39b421d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5edf93e73283b33de3ac826a39b421d9_JaffaCakes118
-
Size
88KB
-
MD5
5edf93e73283b33de3ac826a39b421d9
-
SHA1
5a35c3f9b5664ce2503e515e0d7b917a73ec7a1e
-
SHA256
16a0f363efb6345dbf17e7a59eaeeb47a71cbe60a07e17267bab9e8dde47a412
-
SHA512
83f17865b277b1dfa53aa61fc3160c6154cb14538e55df5108b606d8f02b92d7a7c3d341cb587aae5c580d17d2fd240022f50358d61bf70bcd3b2c863c9d2fba
-
SSDEEP
1536:Fz6THA5MiIynhpiZiFGtzO8EK1l8NaCMutwdS7EdMmczit:1YHA5riwFgz731+NaCM7g7Edcmt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edf93e73283b33de3ac826a39b421d9_JaffaCakes118
Files
-
5edf93e73283b33de3ac826a39b421d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
88c8ab8ea100f30d59cae71269457399
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
FileTimeToLocalFileTime
SetFileTime
GetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
ReadFile
WriteFile
SetFilePointer
CloseHandle
DeleteFileA
LockFile
UnlockFile
FlushFileBuffers
FindNextFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetFileAttributesA
GetDriveTypeA
GetCurrentDirectoryA
SetHandleCount
GlobalHandle
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
GetProfileStringA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeResource
LockResource
LoadResource
FindResourceA
GetPrivateProfileStringA
GetLastError
SetErrorMode
GetVersion
GlobalFree
IsBadReadPtr
GlobalAlloc
GlobalReAlloc
LocalAlloc
LocalFree
GetLocalTime
GlobalLock
GlobalUnlock
GetFullPathNameA
GetStringTypeA
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeW
GetACP
GetModuleHandleA
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
MultiByteToWideChar
UnhandledExceptionFilter
RtlUnwind
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetCurrentProcessId
GetTimeZoneInformation
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
SetEnvironmentVariableA
GetCurrentProcess
TerminateProcess
ExitProcess
SetStdHandle
CompareStringA
CompareStringW
HeapReAlloc
user32
SetWindowPos
UpdateWindow
SetPropA
GetSystemMetrics
DefWindowProcA
wsprintfA
wvsprintfA
DestroyWindow
ReleaseDC
RemovePropA
EndPaint
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
DrawTextA
GetPropA
MessageBeep
LoadStringA
GetActiveWindow
BeginPaint
MessageBoxA
IsWindow
InvalidateRect
GetDC
gdi32
SelectPalette
BitBlt
SetDIBits
CreateCompatibleBitmap
SelectObject
RealizePalette
GetStockObject
CreateCompatibleDC
DeleteObject
DeleteDC
CreatePalette
SetBkColor
SetTextColor
SetBkMode
Exports
Exports
Sections
.text Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
monseg Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rrdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE