Static task
static1
Behavioral task
behavioral1
Sample
82c08fb22a946273b9dca549f0cc855d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
82c08fb22a946273b9dca549f0cc855d_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
82c08fb22a946273b9dca549f0cc855d_JaffaCakes118
-
Size
348KB
-
MD5
82c08fb22a946273b9dca549f0cc855d
-
SHA1
25ef10a17e3a8bda8428eb5d11b089d873bd3c11
-
SHA256
9394d6b740da3305d4cb9c165ecb1c8a11c58c7c401b4739dc8613e732fd5117
-
SHA512
af5d511a9a342e7babd3fca53fda8452867a8efff6cb31aa2b42c4b985a2bef15bc0c08889f799f4185de31bb30119f5e2d3fa725b589f82c459406cfd0ac859
-
SSDEEP
6144:9TAp7dfO/n7M0fCMSpXcm8TA96hJFwIEHipnlL6vZW1BC+N7ncb5HxC/s63+xEku:9UG/n7MohSum8Tph/j4ipnEk1r7nc/gD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82c08fb22a946273b9dca549f0cc855d_JaffaCakes118
Files
-
82c08fb22a946273b9dca549f0cc855d_JaffaCakes118.exe windows:5 windows x86 arch:x86
196cf1ad92bd105de7cce732d849dcdd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetFileAttributesA
ExpandEnvironmentStringsA
DisableThreadLibraryCalls
GetVersionExA
CloseHandle
ReadFile
GetFileSize
CreateFileA
FindNextFileA
FindClose
FindFirstFileA
LocalReAlloc
GetLastError
SetFilePointer
GetLocaleInfoA
WriteFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FormatMessageA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
VirtualFree
VirtualAlloc
HeapReAlloc
GetCPInfo
RtlUnwind
InterlockedExchange
GetStringTypeW
lstrcpynA
lstrcmpiA
LocalFree
LocalAlloc
lstrlenA
IsDBCSLeadByte
TerminateProcess
GetStringTypeA
user32
DialogBoxParamA
GetDlgItem
PostMessageA
SendDlgItemMessageA
ScreenToClient
GetMessagePos
GetClientRect
CheckDlgButton
CharNextA
GetParent
IsDlgButtonChecked
GetWindowLongA
SendMessageA
SetWindowLongA
LoadStringA
SetDlgItemTextA
EndDialog
GetWindowTextA
EnableWindow
MessageBoxA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shlwapi
wnsprintfA
StrCatBuffA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9e3c Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.1o2p Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.16as Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aeas Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.k1kl Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ps1i Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.t3ta Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ksi1 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.12i1 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.123f Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eaa Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ze Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1teaX Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.134 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.724 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.182 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.381 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.832 Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ii32 Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.i832 Size: 512B - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.i833 Size: 512B - Virtual size: 218B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.i803 Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.i804 Size: 512B - Virtual size: 246B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1928 Size: 512B - Virtual size: 202B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1hgh Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ