Static task
static1
Behavioral task
behavioral1
Sample
0399a938361ebe3ea0c4d713b02b74a4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0399a938361ebe3ea0c4d713b02b74a4_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
0399a938361ebe3ea0c4d713b02b74a4_JaffaCakes118
-
Size
49KB
-
MD5
0399a938361ebe3ea0c4d713b02b74a4
-
SHA1
3c2169047072777cd05e25f4d1252afae392498e
-
SHA256
e6de8bfca6990525edbe92fe113bca3d5b06738840d42b2c837ed1bcca4677dc
-
SHA512
f09281238d1347804f58d6ad09ec00372ca2c2338e7a896cc7ba4c940e40de8293b26ff0a52b6ac8120e3184171a35cbcec52401b144ee5185ca88f2880343f1
-
SSDEEP
1536:vSc82B7u6GAoj7fRiMQlAdi44RVaS4877:vv7uf3XRiMN9Sj7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0399a938361ebe3ea0c4d713b02b74a4_JaffaCakes118
Files
-
0399a938361ebe3ea0c4d713b02b74a4_JaffaCakes118.exe windows:5 windows x86 arch:x86
4dcb722a4581761876ee4351184984de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetKeyboardState
EndDialog
LoadCursorW
ToUnicode
CloseWindowStation
SendMessageW
DrawIcon
GetIconInfo
PeekMessageA
OpenWindowStationA
MsgWaitForMultipleObjects
GetMessageA
SetThreadDesktop
CloseDesktop
GetKeyState
GetClassNameW
GetCursorPos
GetDlgItemTextW
PeekMessageW
GetMessageW
GetWindowThreadProcessId
GetDlgItemTextA
GetForegroundWindow
GetWindowLongW
ExitWindowsEx
GetWindowTextW
SetProcessWindowStation
CharLowerBuffA
GetClipboardData
FindWindowExW
OpenDesktopA
DispatchMessageW
GetDlgItem
kernel32
EnterCriticalSection
WriteProcessMemory
GetTickCount
WaitForSingleObject
FlushFileBuffers
GetUserDefaultUILanguage
lstrcpyW
CreateDirectoryW
lstrcpyA
GetVersionExW
GetCommandLineA
GetProcessHeap
ReadFile
ResetEvent
GetFileSizeEx
GetTimeZoneInformation
CreateEventW
InitializeCriticalSection
CopyFileW
GlobalLock
SetEndOfFile
GetCurrentThreadId
CreateFileMappingW
FindResourceW
lstrcpynW
DisconnectNamedPipe
LeaveCriticalSection
CreateProcessW
FindNextFileW
DeleteFileW
CreateThread
lstrcmpiA
SystemTimeToFileTime
UnmapViewOfFile
GetTempFileNameW
lstrcatA
GetExitCodeProcess
GetCurrentProcessId
ExpandEnvironmentStringsW
SetFileAttributesW
GetProcessTimes
GetSystemTimeAsFileTime
GetFileTime
GetModuleFileNameA
GlobalUnlock
CloseHandle
GetFileSize
GetThreadPriority
HeapAlloc
GetDriveTypeW
ReleaseMutex
GetComputerNameW
GetLogicalDrives
FindFirstFileW
SetFilePointer
SetLastError
GetSystemTime
Sections
.abkx Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rul Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zkzat Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ