Static task
static1
Behavioral task
behavioral1
Sample
6588fe90c0af368d0d60e5eba546738b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6588fe90c0af368d0d60e5eba546738b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6588fe90c0af368d0d60e5eba546738b_JaffaCakes118
-
Size
168KB
-
MD5
6588fe90c0af368d0d60e5eba546738b
-
SHA1
45cbb6eb58c6bf662001f8476cfe4709fcb37f35
-
SHA256
46318a5289d4e8319b83bf1579030c38232c2f27d047ceeca64cd4ac02159486
-
SHA512
5cfeef11ec6ea815cc787e33c6de3205db6f3a720cc943d85831cfbef17bb843221e3d0f4b0914b6f597381c93af92677d0632386cb073c7b5077877884dae1a
-
SSDEEP
3072:Y95qQ/o5bLwW38yiOMqVba3ocoz0y3u9oOq1Pvf1ubAgPnv7oFIpHf7n:Y95qQgbd8EMqg3EzFu9E1Pvf1yPnjbNb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6588fe90c0af368d0d60e5eba546738b_JaffaCakes118
Files
-
6588fe90c0af368d0d60e5eba546738b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7bda6f2230845b837343c29b8fe140b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryW
ExitProcess
GlobalUnlock
WaitForSingleObject
GlobalLock
GetVersionExW
GetTempPathW
lstrlenW
SetErrorMode
lstrcmpW
WideCharToMultiByte
WriteConsoleInputVDMA
GetTempFileNameW
GetModuleHandleW
Sleep
OpenProcess
ExpandEnvironmentStringsW
GetModuleFileNameW
FreeLibrary
GetModuleHandleA
SearchPathW
GetVersion
GlobalFree
CopyFileW
ReadFile
GetProcessHandleCount
GetProcAddress
LoadLibraryExW
lstrcpynW
WriteFile
SetFilePointer
lstrcpyW
GetExitCodeProcess
SetCurrentDirectoryW
CreateThread
GetCommandLineW
GetFileAttributesW
EnumResourceNamesA
CreateFileW
RemoveDirectoryW
MultiByteToWideChar
FindClose
LoadLibraryW
GetPrivateProfileStringW
LoadLibraryA
lstrcmpiA
lstrcmpiW
GetDiskFreeSpaceW
GetWindowsDirectoryW
DeleteFileW
WritePrivateProfileStringW
GetLastError
CreateProcessW
GetSystemDirectoryW
CloseHandle
FreeEnvironmentStringsW
lstrcatW
MoveFileW
GlobalAlloc
lstrcpyA
CompareFileTime
lstrcpynA
SetFileAttributesW
GetFullPathNameW
lstrlenA
MulDiv
GetFileSize
FindNextFileW
GetCurrentProcess
FindFirstFileW
GetShortPathNameW
GetTickCount
SetFileTime
advapi32
RegCreateKeyExW
RegCloseKey
RegEnumValueW
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyW
user32
LoadCursorW
CharUpperW
OpenClipboard
IsWindowEnabled
CreateDialogParamW
DefWindowProcW
LoadImageW
IsWindowVisible
SetClipboardData
GetDlgItemTextW
CreateWindowExW
GetWindowModuleFileNameW
SetWindowPos
CharNextA
GetMessagePos
GetClassInfoW
TrackPopupMenu
LoadBitmapW
SendMessageTimeoutW
SetWindowTextW
CloseClipboard
GetSystemMenu
ShowWindow
GetClientRect
SetDlgItemTextW
EnableMenuItem
DrawTextW
GetSystemMetrics
GetDlgItem
RegisterClassW
SetWindowLongW
SetCursor
AppendMenuW
FillRect
EmptyClipboard
SendMessageW
wsprintfA
SetClassLongW
FindWindowExW
GetWindowRect
CharPrevW
EndDialog
ExitWindowsEx
MessageBoxIndirectW
GetDC
DestroyWindow
EnableWindow
CallWindowProcW
SetTimer
CreatePopupMenu
EndPaint
BeginPaint
GetSysColor
DialogBoxParamW
InvalidateRect
PeekMessageW
IsWindow
DispatchMessageW
CharNextW
SystemParametersInfoW
wsprintfW
PostQuitMessage
CheckDlgButton
SetForegroundWindow
ScreenToClient
comctl32
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
oleacc
LresultFromObject
CreateStdAccessibleObject
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHBrowseForFolderW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemFree
gdi32
DeleteObject
CreateBrushIndirect
SetTextColor
CreateFontIndirectW
GetDeviceCaps
SetBkMode
SelectObject
SetBkColor
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ