Static task
static1
Behavioral task
behavioral1
Sample
a54d1a3351a55631c0bb29a7d794c9fc_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a54d1a3351a55631c0bb29a7d794c9fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a54d1a3351a55631c0bb29a7d794c9fc_JaffaCakes118
-
Size
543KB
-
MD5
a54d1a3351a55631c0bb29a7d794c9fc
-
SHA1
10cdebc474d01767fdc46f123cf7e82dbab4ca43
-
SHA256
a975411f734cc72fcbdc07fd908aae9b3fef798d71beea1b033ea45bd830da43
-
SHA512
3ecc881ac7227fdc4bd87f2391296568aa9f68ed75386c08d1d71b87319b7261c61313aa4c09ab2d0e94cd433f31dbd1a015ca65de8ebe019d846712dddbcbf6
-
SSDEEP
12288:QNXDeMmmmJ9X8RCh2DtjJb+gzZTgZXgT6MPnsr0YybfHQ:QJeMAJRNYagzSZzCgcf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a54d1a3351a55631c0bb29a7d794c9fc_JaffaCakes118
Files
-
a54d1a3351a55631c0bb29a7d794c9fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
cbb4779c1d0d2afcbcade4bd51f6bd32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ToUnicodeEx
GetMessageTime
FlashWindow
GetKeyNameTextW
SetParent
RegisterClassW
GetClipboardFormatNameW
DrawTextExW
GetUserObjectInformationA
MapVirtualKeyExW
WaitForInputIdle
DlgDirListComboBoxA
CharToOemBuffA
SetWindowsHookExW
GetNextDlgTabItem
GetWindowTextLengthW
ToAsciiEx
DrawTextA
SetScrollInfo
GetMessageW
OpenInputDesktop
LookupIconIdFromDirectoryEx
SetDlgItemInt
GetMenuInfo
GetDlgItemTextW
LoadAcceleratorsW
SetSystemCursor
IsWindowUnicode
SetWindowLongW
CharUpperA
EqualRect
wsprintfW
FlashWindowEx
SetMenuContextHelpId
TrackPopupMenuEx
RegisterClassA
MapVirtualKeyA
GetCapture
DefMDIChildProcW
ExitWindowsEx
OpenClipboard
GetThreadDesktop
ScrollWindowEx
GetShellWindow
GetKeyboardLayoutList
ShowCaret
RegisterClassExW
SetMenuItemBitmaps
RegisterClassExA
PostThreadMessageW
EnableScrollBar
InflateRect
AppendMenuW
MapDialogRect
CopyAcceleratorTableW
ShowWindowAsync
SetPropW
DrawEdge
CharNextExA
kernel32
CompareStringA
ReadConsoleA
GetEnvironmentStrings
GetStringTypeW
SetEnvironmentVariableW
TlsFree
GetModuleHandleA
SetEnvironmentVariableA
VirtualQuery
TlsSetValue
CompareStringW
EnterCriticalSection
InitializeCriticalSection
LCMapStringW
WriteFile
FreeEnvironmentStringsW
GetPrivateProfileSectionNamesA
SetStdHandle
GetProcAddress
SetConsoleActiveScreenBuffer
LCMapStringA
HeapCreate
GetProcessHeap
GetCurrentDirectoryW
GetModuleFileNameA
GetCurrentProcess
EnumDateFormatsW
GetCPInfo
TerminateThread
GetLocaleInfoW
VirtualFree
GetTickCount
GetOEMCP
SetLastError
LoadLibraryA
GetUserDefaultLCID
WaitForMultipleObjectsEx
FreeEnvironmentStringsA
GetDateFormatA
GetCurrentThreadId
GetStdHandle
GetStartupInfoA
GetACP
lstrlenW
SetHandleCount
TerminateProcess
VirtualProtect
GetEnvironmentStringsA
MultiByteToWideChar
HeapDestroy
GetSystemInfo
GetComputerNameW
GetProfileSectionA
lstrcatA
WriteProfileStringA
HeapFree
EnumSystemLocalesA
GetLastError
lstrcmpiA
GetLocaleInfoA
ExitProcess
FileTimeToLocalFileTime
GetEnvironmentStringsW
LocalUnlock
ReadFile
HeapSize
GetStringTypeA
FlushFileBuffers
IsBadWritePtr
OpenMutexA
TlsGetValue
GetCurrentProcessId
DeleteFileA
RtlUnwind
LocalReAlloc
WritePrivateProfileStructW
AddAtomW
IsValidCodePage
CreateMutexA
WritePrivateProfileStringA
FindFirstFileW
InterlockedExchange
CloseHandle
GetThreadLocale
OutputDebugStringW
GetPrivateProfileSectionW
DeleteCriticalSection
LeaveCriticalSection
GetCommandLineA
GetFileType
OpenEventW
LocalShrink
GetTimeFormatA
GetTimeZoneInformation
QueryPerformanceCounter
UnhandledExceptionFilter
TlsAlloc
IsValidLocale
GetCurrentThread
GetVersionExA
GetSystemTimeAsFileTime
WideCharToMultiByte
HeapReAlloc
CreateSemaphoreA
SetPriorityClass
HeapAlloc
ExpandEnvironmentStringsW
VirtualAlloc
RtlZeroMemory
SetFilePointer
SetTimeZoneInformation
comctl32
CreateToolbarEx
ImageList_DragEnter
CreateMappedBitmap
ImageList_Draw
DrawStatusTextA
InitCommonControlsEx
MakeDragList
CreatePropertySheetPageW
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_AddIcon
advapi32
RegQueryInfoKeyW
RegSaveKeyW
RegDeleteKeyW
AbortSystemShutdownA
CryptReleaseContext
RegCreateKeyExW
RegQueryValueA
CreateServiceW
CryptDuplicateKey
GetUserNameW
LookupSecurityDescriptorPartsA
CryptDestroyHash
CryptEnumProviderTypesA
gdi32
GetTextExtentPointW
SetDIBitsToDevice
PolylineTo
GetTextFaceW
CreateFontIndirectW
CreateFontA
GetMetaFileW
PolyPolygon
AddFontResourceA
GetCharWidthA
GetClipBox
EnumICMProfilesW
FillPath
GetViewportExtEx
GetCharWidth32A
CreateDIBitmap
FlattenPath
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ