Static task
static1
Behavioral task
behavioral1
Sample
5edf0d836eb3458d984b96bb14bf41e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5edf0d836eb3458d984b96bb14bf41e5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5edf0d836eb3458d984b96bb14bf41e5_JaffaCakes118
-
Size
441KB
-
MD5
5edf0d836eb3458d984b96bb14bf41e5
-
SHA1
cd7e253f4566d5802a1bd975b5dbcca9798bdf10
-
SHA256
c3f4fcbcc44aec3532b66efb17a103adb65dd971032d89c0720cadd0700ae2c1
-
SHA512
7131dfd7c804fbbca58deada9e25b5cfd24fc7a9d1d073b69e2ab87b93099e34b653d24f76d1c968a71d96b2209bb2ab76970fd6c64fb9c5b4128ef2db5f2b83
-
SSDEEP
12288:wTT4mQKjM0+y4mkCawEcIQBx6OtURy1um4oNXeACs:ox6OiB4XeW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5edf0d836eb3458d984b96bb14bf41e5_JaffaCakes118
Files
-
5edf0d836eb3458d984b96bb14bf41e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
174d41760f347c36080d99436150d5d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryExA
LoadLibraryA
AreFileApisANSI
LoadLibraryExW
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryW
GetSystemDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
GetShortPathNameA
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryW
SetCurrentDirectoryA
GetCurrentDirectoryW
SearchPathA
SearchPathW
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
CreateFileA
GetFileSize
SetFilePointer
GetFileInformationByHandle
ReadFile
WriteFile
SetEndOfFile
CompareFileTime
GetStdHandle
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
Sleep
VirtualAlloc
VirtualFree
GetVersionExA
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
CreateProcessA
ExpandEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
user32
KillTimer
PostMessageA
GetDlgItem
DestroyWindow
SendMessageA
SetTimer
LoadIconA
GetWindowTextLengthW
MessageBoxW
GetWindowTextW
GetWindowTextA
GetWindowTextLengthA
SetWindowTextW
SetWindowTextA
CreateWindowExA
CreateWindowExW
RegisterClassW
RegisterClassA
LoadStringW
LoadStringA
CharPrevA
CharNextA
DialogBoxParamW
CreateDialogParamW
DialogBoxParamA
GetWindowLongA
SetWindowLongA
CreateDialogParamA
ShowWindow
MoveWindow
GetWindowRect
SystemParametersInfoA
GetDialogBaseUnits
CharToOemA
CharLowerW
CharLowerA
CharUpperW
EndDialog
CharPrevExA
CharUpperA
oleaut32
VariantClear
SysAllocStringByteLen
SysAllocString
VariantCopy
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
realloc
strlen
free
malloc
memcpy
memmove
_purecall
memcmp
_CxxThrowException
__CxxFrameHandler
_controlfp
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ