Static task
static1
Behavioral task
behavioral1
Sample
75258a5cb8524903e3d59f068a4698ed_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
75258a5cb8524903e3d59f068a4698ed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75258a5cb8524903e3d59f068a4698ed_JaffaCakes118
-
Size
353KB
-
MD5
75258a5cb8524903e3d59f068a4698ed
-
SHA1
718cd7528614d7c037abaf2f42a0031f29c5596b
-
SHA256
59b74d3edaff7b7424f0218c7f4cb4d91e8e2895b538788bf1821e45cbb6896f
-
SHA512
92578433dfb9a5c2f37459f312015c1fad69ea3ed2e46d29de3c187f893d76013e0ed3ea8e1cc0e9f22dd11a2702b490312aa4147a73a98f066a0b442186825d
-
SSDEEP
6144:grzi/modHXGGTGrCB9aG1DJbDTBvl7hAO5z5kNM9Vy:grziv3vFB9J1DJPTxl7hfGa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75258a5cb8524903e3d59f068a4698ed_JaffaCakes118
Files
-
75258a5cb8524903e3d59f068a4698ed_JaffaCakes118.exe windows:4 windows x86 arch:x86
78432b8949ef05b6ec09f13349b9ebb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetProcAddress
LoadLibraryA
WinExec
DeleteFileW
SearchPathA
GetShortPathNameA
DeleteFileA
GetSystemDirectoryW
GetShortPathNameW
WideCharToMultiByte
ExitProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateMutexW
SetEndOfFile
WriteConsoleW
GetLastError
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetExitCodeProcess
Sleep
TerminateProcess
GetModuleFileNameA
CreateFileA
GetFileSize
CreateProcessW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemTime
SystemTimeToFileTime
GetModuleHandleW
ReadFile
GetModuleFileNameW
GetTickCount
CreateFileW
WriteFile
GetConsoleOutputCP
CloseHandle
FreeEnvironmentStringsA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
RaiseException
MultiByteToWideChar
HeapSize
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
HeapAlloc
HeapFree
RtlUnwind
ExitThread
ResumeThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetProcessHeap
GetStartupInfoW
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetModuleHandleA
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
user32
RedrawWindow
DrawTextW
CreateWindowExW
SetTimer
GetWindowDC
ReleaseDC
GetDesktopWindow
GetWindowRect
GetClientRect
FindWindowW
GetWindowLongA
SetWindowLongW
GetDC
GetWindowTextW
LoadCursorW
RegisterClassExW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
MoveWindow
ShowWindow
UpdateWindow
gdi32
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
shell32
SHGetFolderPathA
rpcrt4
RpcStringFreeW
UuidToStringW
UuidCreate
wininet
InternetCloseHandle
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
iphlpapi
GetAdaptersInfo
Sections
.text Size: 259KB - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shr Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ