Static task
static1
Behavioral task
behavioral1
Sample
83648c3f10616f8d3bdf54b292eec93a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83648c3f10616f8d3bdf54b292eec93a_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
83648c3f10616f8d3bdf54b292eec93a_JaffaCakes118
-
Size
143KB
-
MD5
83648c3f10616f8d3bdf54b292eec93a
-
SHA1
51a7bc830463ca32aa661b3bba3534cb8cccc4d7
-
SHA256
c9286a810f3696ddb0b678b0b17d9a3946060d416227cc3efc5da5dcf229727e
-
SHA512
26865f404d235c44c88ce8dc9a2f63f61ce98e08246b1cadeb00a7161b968d06b5e10e5d00c4a19332f2decdf59f542b5b9dfb91b86348d80f1912bcf0077b0b
-
SSDEEP
3072:hp+IvRO96Rv9Cx93IngH9p18jsTG4+MfSi25YIJD8jRpAZw:hkIvU96RVu3IntgPW1JDy7A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83648c3f10616f8d3bdf54b292eec93a_JaffaCakes118
Files
-
83648c3f10616f8d3bdf54b292eec93a_JaffaCakes118.exe windows:4 windows x86 arch:x86
4dd52a7dcfa54e7ee762ce91d19d83bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
CharLowerW
PeekMessageA
RegisterClipboardFormatW
CheckDlgButton
DialogBoxParamW
CreateWindowExW
GetDC
InflateRect
ReleaseDC
EnableWindow
WinHelpW
GetAsyncKeyState
RegisterWindowMessageW
IsChild
LoadBitmapW
MoveWindow
GetSystemMetrics
UpdateWindow
EnumChildWindows
IsRectEmpty
SetWindowLongW
GetWindowThreadProcessId
SendDlgItemMessageW
ScreenToClient
SystemParametersInfoW
LoadImageW
EqualRect
ClientToScreen
EndPaint
kernel32
GetThreadLocale
ResetEvent
GetSystemTimeAsFileTime
GetFileAttributesA
ResumeThread
LocalFree
FindClose
LCMapStringA
CreateFileMappingA
FindResourceA
InitializeCriticalSection
GetFileSize
TlsAlloc
DisableThreadLibraryCalls
Sleep
GetVersion
QueryPerformanceCounter
SetLastError
OpenMutexW
GetExitCodeThread
GetDriveTypeW
GetModuleHandleW
CreateEventW
GetFileAttributesW
ReadFile
GetCurrentThreadId
LCMapStringW
LeaveCriticalSection
FindFirstFileW
WriteConsoleW
GetACP
VirtualAlloc
CreateMutexW
GetCommandLineA
GetCurrentDirectoryW
GetDriveTypeA
InterlockedDecrement
GetTickCount
HeapCreate
FormatMessageA
CreateThread
OpenEventW
GetExitCodeProcess
GetStdHandle
GetEnvironmentStrings
GetLastError
IsBadReadPtr
GetSystemDirectoryA
GetModuleHandleA
GetModuleFileNameW
LoadLibraryExA
GlobalAlloc
WaitForSingleObject
msvcrt
strchr
_strdup
atoi
strncmp
wcstoul
_wcslwr
_rotr
rand
?terminate@@YAXXZ
_CIacos
_tell
_wcsdup
_wcsnicmp
_ultoa
_ftol
malloc
_cexit
floor
ctime
calloc
iswalpha
__p__fmode
_commit
_CxxThrowException
_wcsupr
_stat
mbstowcs
_itow
strtok
wcstol
isalnum
_isatty
isdigit
isxdigit
fread
exit
__p__osver
_beginthreadex
_snprintf
_finite
_except_handler3
__CxxFrameHandler
__p__commode
atol
_CIsqrt
srand
strtoul
_wcsicmp
__pioinfo
__p__iob
toupper
realloc
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbss Size: 512B - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.textbss Size: 512B - Virtual size: 149B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 512B - Virtual size: 422B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ