Static task
static1
Behavioral task
behavioral1
Sample
89e505c506ddc6bfd7b3c84f452d1bda_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
89e505c506ddc6bfd7b3c84f452d1bda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89e505c506ddc6bfd7b3c84f452d1bda_JaffaCakes118
-
Size
49KB
-
MD5
89e505c506ddc6bfd7b3c84f452d1bda
-
SHA1
ab805989ac1198715a12ce8be24a18f45740c3a2
-
SHA256
3ef4996a20d0ce7fb0d213a965e1650efdd9b1ab5f3ecad1e35479747cfe8cba
-
SHA512
e81a8c71a46182ed30b201ab9c6144f30777e0f97f8b7d26501557ba4a41f3c2fc77d964fabc0d6eeccd858c266c3e1f973189e56181dea2dd1c7c8d3041dce0
-
SSDEEP
1536:OHzaIAyP9LwB0BJ0HncMB6FAbCXrNbAQx7zpUPBXI:OTaZyP9kB0BJicMB6FhbNsQRzpw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89e505c506ddc6bfd7b3c84f452d1bda_JaffaCakes118
Files
-
89e505c506ddc6bfd7b3c84f452d1bda_JaffaCakes118.exe windows:5 windows x86 arch:x86
ef4f3fa384b09fd2435be0fbf0a17594
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadCursorW
GetDlgItemTextA
OpenWindowStationA
GetWindowLongW
GetWindowThreadProcessId
GetIconInfo
OpenDesktopA
GetKeyState
GetCursorPos
FindWindowExW
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
GetDlgItem
CloseDesktop
DispatchMessageW
DrawIcon
SetProcessWindowStation
GetMessageW
CloseWindowStation
GetDlgItemTextW
GetKeyboardState
PeekMessageW
GetClipboardData
ExitWindowsEx
GetWindowTextW
ToUnicode
GetForegroundWindow
SendMessageW
SetThreadDesktop
CharLowerBuffA
EndDialog
GetClassNameW
kernel32
GetComputerNameW
lstrcpynW
CopyFileW
GetProcessHeap
GetFileTime
GetProcessTimes
GetSystemTime
WriteFile
GlobalUnlock
HeapReAlloc
GetCurrentThreadId
InitializeCriticalSection
lstrlenW
DisconnectNamedPipe
lstrcpyA
FindNextFileW
ExpandEnvironmentStringsW
SetFilePointer
GetExitCodeProcess
GetLocalTime
GetFileSize
EnterCriticalSection
GetThreadPriority
MapViewOfFile
GetDriveTypeW
FlushFileBuffers
OpenMutexW
SetEvent
LeaveCriticalSection
CreateFileMappingW
GetVersionExW
CloseHandle
GetUserDefaultUILanguage
CreateDirectoryW
GetSystemTimeAsFileTime
CreateMutexW
GetTempPathW
lstrcmpiW
GetTickCount
GetModuleFileNameA
SetFileTime
GetTempFileNameW
SetFileAttributesW
SystemTimeToFileTime
UnmapViewOfFile
GetLastError
lstrlenA
FindFirstFileW
HeapFree
lstrcmpiA
OpenProcess
GetModuleFileNameW
FindClose
ReadFile
MultiByteToWideChar
lstrcatW
WideCharToMultiByte
DeleteFileW
Sections
.dif Size: 39KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.szwzwp Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.unshwj Size: 7KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ