Static task
static1
Behavioral task
behavioral1
Sample
94f84625e12d9b8180dd19ae99db11c5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94f84625e12d9b8180dd19ae99db11c5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94f84625e12d9b8180dd19ae99db11c5_JaffaCakes118
-
Size
23KB
-
MD5
94f84625e12d9b8180dd19ae99db11c5
-
SHA1
dc0af6abcdb0d9e5b6fa169cd92d1a30a2b3cc82
-
SHA256
3bb9dd85c0dd8f75c913d67b9b69d2d300073037a25da1bf8e3fc689f8c021ac
-
SHA512
220c4e60248232bbf23c4123bff907e39697b164b79062341785a904dd9683dda789de1775e9a539c565215649fb1d4f178ddf62250e4f542daec59ba57fff08
-
SSDEEP
384:nx6SlmE3o/z+kP3LvTb0nX9S6LrBt+tPoUU4+ayrX:nx6vSobPLvTQX9Sg9oFgX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94f84625e12d9b8180dd19ae99db11c5_JaffaCakes118
Files
-
94f84625e12d9b8180dd19ae99db11c5_JaffaCakes118.exe windows:5 windows x86 arch:x86
9a355e4cc9b1679c3ca1f43b2b5c3d78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
Sleep
GetTickCount
InterlockedDecrement
HeapFree
GetProcAddress
InterlockedExchange
DeleteCriticalSection
GetCurrentProcess
LeaveCriticalSection
GetTickCount
GetModuleHandleA
HeapFree
LocalAlloc
UnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
InterlockedIncrement
VirtualAlloc
GetLastError
lstrcmpiW
CreateThread
CreateFileW
CreateThread
EnterCriticalSection
DeleteCriticalSection
CreateThread
GetCurrentThreadId
HeapFree
LoadLibraryW
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
CreateEventW
GetModuleFileNameW
UnhandledExceptionFilter
HeapAlloc
LocalAlloc
CloseHandle
InterlockedIncrement
lstrcmpiW
LeaveCriticalSection
LocalFree
GetSystemTimeAsFileTime
QueryPerformanceCounter
ReadFile
lstrlenA
InterlockedDecrement
GetCurrentProcessId
DeleteCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
GetCurrentThreadId
lstrcmpiW
GetModuleHandleW
GetProcessHeap
user32
EndDialog
SetCursor
SetWindowTextW
GetClientRect
CreateWindowExW
SetDlgItemTextW
KillTimer
ShowWindow
GetDesktopWindow
PostQuitMessage
GetWindowRect
wsprintfA
GetWindowRect
LoadCursorW
CreateWindowExW
wsprintfA
IsDlgButtonChecked
GetClientRect
SetForegroundWindow
PostQuitMessage
DefWindowProcW
GetSystemMetrics
SendMessageW
SetDlgItemTextW
DefWindowProcW
ShowWindow
PeekMessageW
PostMessageW
EndPaint
CreateWindowExW
GetParent
GetWindowRect
GetParent
SetWindowPos
SendMessageW
LoadStringW
GetParent
SetForegroundWindow
SetWindowTextW
LoadIconW
GetSystemMetrics
DialogBoxParamW
LoadIconW
ShowWindow
PostMessageW
MessageBoxW
GetSystemMetrics
BeginPaint
GetParent
SetTimer
EndPaint
SetWindowTextW
EndPaint
DispatchMessageW
BeginPaint
GetWindowLongW
EnableWindow
LoadStringW
Sections
.text Size: 18KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ