c:\tse
Static task
static1
Behavioral task
behavioral1
Sample
74c3f8fee87273e79abb4e0d1e1e5297_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
74c3f8fee87273e79abb4e0d1e1e5297_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74c3f8fee87273e79abb4e0d1e1e5297_JaffaCakes118
-
Size
540KB
-
MD5
74c3f8fee87273e79abb4e0d1e1e5297
-
SHA1
dcc0f8049a8bca59aef8ba2f417b50f417756c03
-
SHA256
0755c7eaea713aa65aea43395d4ea810eeb30e361f90218a352c15d2feb99bc9
-
SHA512
4fb211ef456f397d41466c78f884ad473a787e2f3414832249681c63662320c8a30dd0ab16b49ab9fcf2fb6a1b0d63b72da368048275e5de4cdb722ab5a0c4a5
-
SSDEEP
12288:CvlwcvO1fcPsHLH+4bfXaFVCY2PvtA+RY1XMzc2f/BZeJVCQv:MScW1kPsHLHpbfXaFVvzy9H3BoJU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74c3f8fee87273e79abb4e0d1e1e5297_JaffaCakes118
Files
-
74c3f8fee87273e79abb4e0d1e1e5297_JaffaCakes118.exe windows:4 windows x86 arch:x86
aed3113a955539c3ce84d967dfaa3243
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStringTypeW
LeaveCriticalSection
GetCommandLineW
GetLastError
GetProcAddress
GetVersionExA
SetStdHandle
GetUserDefaultLCID
HeapDestroy
GetStdHandle
TlsAlloc
GetTimeZoneInformation
SetFilePointer
GetSystemInfo
OpenMutexA
GetLocaleInfoA
RtlUnwind
TlsGetValue
UnhandledExceptionFilter
ReadFile
GetEnvironmentStringsW
CreateMutexA
GetOEMCP
MultiByteToWideChar
EnterCriticalSection
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
GetCurrentThreadId
GetCurrentThread
LCMapStringW
GetStringTypeA
HeapCreate
InitializeCriticalSection
SetThreadAffinityMask
WriteFile
LCMapStringA
IsValidLocale
CompareStringA
QueryPerformanceCounter
HeapAlloc
GetLocaleInfoW
TlsFree
HeapFree
GetCPInfo
GetACP
FreeEnvironmentStringsW
SetHandleCount
EnumSystemLocalesA
VirtualFree
SetEnvironmentVariableA
VirtualQuery
GetTickCount
LoadLibraryA
GetStartupInfoW
GetTimeFormatA
IsBadWritePtr
TlsSetValue
GetModuleFileNameW
GetModuleFileNameA
GetCurrentProcessId
VirtualAlloc
VirtualProtect
CloseHandle
CompareStringW
GetDiskFreeSpaceExA
FlushFileBuffers
DeleteCriticalSection
ExitProcess
GetSystemTimeAsFileTime
GetDateFormatA
HeapReAlloc
TerminateProcess
FreeEnvironmentStringsA
SetLastError
WideCharToMultiByte
GetCurrentProcess
IsValidCodePage
GetFileType
GetEnvironmentStrings
InterlockedExchange
HeapSize
gdi32
GetNearestPaletteIndex
SetGraphicsMode
RealizePalette
RemoveFontResourceA
WidenPath
EnumICMProfilesW
CreateEnhMetaFileA
GetBkColor
user32
CopyAcceleratorTableA
SetScrollPos
MonitorFromPoint
FindWindowW
GetKBCodePage
GetMessageA
EnumPropsW
ChangeDisplaySettingsA
LoadCursorFromFileA
GrayStringW
DdeCmpStringHandles
AnyPopup
DrawEdge
RegisterClassA
DestroyWindow
SubtractRect
GetAltTabInfo
ShowWindow
GetMenuItemCount
EnumDesktopsA
RegisterClassExA
EndDialog
ExcludeUpdateRgn
SetCaretBlinkTime
CheckRadioButton
GetWindowLongA
CreateWindowExA
GetWindowWord
InvalidateRgn
DefWindowProcA
DefWindowProcW
WINNLSGetEnableStatus
SetCursorPos
EnumDisplaySettingsW
MessageBoxW
GetDesktopWindow
UnhookWindowsHook
IsCharAlphaW
ReleaseDC
UnloadKeyboardLayout
SendNotifyMessageA
AdjustWindowRect
comctl32
ImageList_AddMasked
ImageList_LoadImage
CreateToolbarEx
ImageList_DragLeave
ImageList_Read
CreateMappedBitmap
GetEffectiveClientRect
ImageList_DragEnter
DrawInsert
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Merge
InitCommonControlsEx
ImageList_AddIcon
ImageList_DrawEx
ImageList_SetBkColor
ImageList_GetIcon
ImageList_Duplicate
CreateStatusWindowW
DestroyPropertySheetPage
ImageList_Remove
ImageList_Destroy
ImageList_Replace
ImageList_SetFlags
ImageList_LoadImageW
advapi32
CryptGenRandom
RegReplaceKeyA
CryptGetDefaultProviderA
RegOpenKeyW
comdlg32
FindTextA
Sections
.text Size: 158KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 107KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ