Static task
static1
Behavioral task
behavioral1
Sample
5f0c017b616ae8d733f7e396c180da1b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f0c017b616ae8d733f7e396c180da1b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5f0c017b616ae8d733f7e396c180da1b_JaffaCakes118
-
Size
162KB
-
MD5
5f0c017b616ae8d733f7e396c180da1b
-
SHA1
27fc44cc6211563b9ca64fb7953478913e85b91b
-
SHA256
88c34b9d2b4d03f42fd1f63b0d7738680253cec6cad4303563c3031fb344ce96
-
SHA512
22ec40869864528f1492cb7052158cca0871e789f55631fe14a477cc374db2ccc145c693d5c88a6fbdbd2c7067c735f9b8443548d69bb0497f0a0a74f95e32a0
-
SSDEEP
3072:AD42SR2xpG4erUeHIHroqamZZ9ZeSNnsEcRNlbzibXn1f76PUoKxk:32CCGprUeHIHvZZ9Z6lb4n1u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f0c017b616ae8d733f7e396c180da1b_JaffaCakes118
Files
-
5f0c017b616ae8d733f7e396c180da1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d29184dba2d0747ebf28ec4121f07a4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
shell32
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
user32
SetCapture
GetWindowRect
SetWindowTextW
GetClientRect
GetWindowInfo
CreateWindowExW
MessageBoxW
BeginPaint
GetWindowTextLengthW
SystemParametersInfoW
GetParent
PeekMessageW
DestroyWindow
GetDlgItemTextW
DispatchMessageW
TranslateMessage
GetDlgItem
MapWindowPoints
EndPaint
GetClassInfoExW
SetWindowPos
RegisterClassExW
SetDlgItemTextW
LoadCursorW
GetWindow
GetDC
EndDialog
kernel32
GetModuleHandleA
QueryPerformanceCounter
DeleteFileW
GetProcessHeap
FreeEnvironmentStringsA
LeaveCriticalSection
CreateProcessW
GetSystemTimeAsFileTime
FreeLibrary
GetVersionExW
GetCurrentProcess
CreateFileMappingW
GetConsoleMode
GetTickCount
MulDiv
CreateFileA
GetLastError
VirtualFree
WriteConsoleInputVDMA
GetFileType
UnhandledExceptionFilter
HeapAlloc
GetConsoleOutputCP
HeapCreate
GetEnvironmentStringsW
LockResource
ExitProcess
WriteFile
WritePrivateProfileSectionW
GetACP
FindResourceW
LCMapStringW
RtlUnwind
GetStringTypeW
FlushFileBuffers
GetFileAttributesW
GetSystemDirectoryW
GetCPInfo
GetEnvironmentStrings
GetProcAddress
InterlockedExchange
GetProcessHandleCount
HeapSize
RaiseException
Sleep
CreateSemaphoreW
TlsGetValue
HeapDestroy
GetFileSize
VirtualAlloc
GetThreadLocale
IsDebuggerPresent
CopyFileW
EnumResourceNamesA
GetOEMCP
SetStdHandle
GetConsoleCP
SizeofResource
GetLocaleInfoA
LoadResource
DeleteCriticalSection
GetCurrentProcessId
GetVersionExA
WaitForSingleObject
GetStartupInfoW
GetModuleFileNameW
HeapReAlloc
SetFilePointer
GetCurrentThreadId
LoadLibraryExW
InitializeCriticalSection
GetModuleFileNameA
TlsFree
TlsSetValue
FlushInstructionCache
IsProcessorFeaturePresent
LocalAlloc
GetCommandLineW
InterlockedDecrement
WideCharToMultiByte
GetCommandLineA
lstrcmpA
HeapFree
lstrcmpiW
LoadLibraryW
FreeEnvironmentStringsW
ReadFile
SetLastError
CloseHandle
TlsAlloc
CreateFileW
InterlockedCompareExchange
SetHandleCount
GetStringTypeA
GetModuleHandleW
GetVersion
WriteConsoleW
InterlockedIncrement
LCMapStringA
SetUnhandledExceptionFilter
LoadLibraryA
GetStartupInfoA
GetDriveTypeW
LocalFree
lstrlenA
WriteConsoleA
GetStdHandle
lstrlenW
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ