c:\widos\hih\
Static task
static1
Behavioral task
behavioral1
Sample
ae714cf4dbd6dce0b623982252fc456c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ae714cf4dbd6dce0b623982252fc456c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae714cf4dbd6dce0b623982252fc456c_JaffaCakes118
-
Size
485KB
-
MD5
ae714cf4dbd6dce0b623982252fc456c
-
SHA1
fcfe1898f8e4642eb138c0a794d557635fd34b6e
-
SHA256
d6ee928c6ca1fea84b6ca7e6dd60f438ba0edfe91e06617acd38dc696d920c8b
-
SHA512
37e8b5388921b695b57449295526e8487b89d9381f7f1acb5436b382a79804a1e6d9ad56387b8803cb2203e5a414943dbdc56332a40d9aaf4e722bbd6bcf709a
-
SSDEEP
12288:4SdlMNAykqQICbXkMkQapzBuyveAaXzlsK7kdsTR4GtiuJrA5M/EDHo3F7:4slMCykRICbXkMkQapzBuyveAa5sKAdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae714cf4dbd6dce0b623982252fc456c_JaffaCakes118
Files
-
ae714cf4dbd6dce0b623982252fc456c_JaffaCakes118.exe windows:4 windows x86 arch:x86
748fb6e2415b52cd28733b142f371655
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
ImageList_Add
ImageList_DragEnter
ImageList_Draw
ImageList_SetBkColor
DrawStatusTextW
ImageList_GetImageRect
ImageList_Duplicate
ImageList_BeginDrag
ImageList_DragMove
CreateToolbarEx
ImageList_SetOverlayImage
CreatePropertySheetPageA
InitCommonControlsEx
DrawStatusTextA
ImageList_DrawEx
ImageList_LoadImage
user32
CreateWindowStationA
RegisterClassExA
EnumDisplaySettingsExW
DrawStateA
CopyImage
DefWindowProcA
SwitchToThisWindow
DdeGetLastError
LoadCursorA
RegisterClassA
GetMenuItemRect
DdeInitializeA
SetMenuInfo
DdeReconnect
GetClipCursor
ScrollDC
shell32
DoEnvironmentSubstW
kernel32
IsBadWritePtr
HeapFree
FoldStringW
GetEnvironmentStringsW
UnhandledExceptionFilter
EnterCriticalSection
VirtualQuery
VirtualAlloc
SetEnvironmentVariableA
GetProfileIntA
IsValidCodePage
GetFileType
GetTickCount
VirtualFree
GetVersionExA
SetFilePointer
GetLocaleInfoA
FreeEnvironmentStringsA
WriteConsoleOutputCharacterA
MultiByteToWideChar
GetLastError
GetSystemInfo
GetDateFormatA
GetTimeFormatA
RtlUnwind
GetModuleHandleA
FreeEnvironmentStringsW
InterlockedExchange
SetLastError
AddAtomA
TlsAlloc
EnumDateFormatsW
GetOEMCP
LeaveCriticalSection
DeleteCriticalSection
GetStartupInfoA
QueryPerformanceCounter
GetModuleFileNameA
IsValidLocale
GetCommandLineW
FillConsoleOutputCharacterW
SetFileAttributesW
SetConsoleScreenBufferSize
GetCurrentProcessId
TlsGetValue
HeapCreate
GetACP
OpenMutexA
EnumSystemLocalesA
WideCharToMultiByte
FlushFileBuffers
InitializeCriticalSection
GetUserDefaultLCID
GetStringTypeA
OpenEventA
FillConsoleOutputCharacterA
GetStringTypeW
lstrcpyW
SetStdHandle
GlobalFix
CompareStringW
HeapAlloc
GetLocaleInfoW
GetCurrentProcess
LCMapStringW
ExitProcess
GetStdHandle
HeapDestroy
LCMapStringA
TlsFree
GetStringTypeExA
TlsSetValue
TransactNamedPipe
SetHandleCount
WriteFile
LoadModule
HeapReAlloc
GlobalReAlloc
GetCommandLineA
GetProcAddress
LoadLibraryA
OpenEventW
GetNamedPipeHandleStateW
VirtualProtect
GetSystemTimeAsFileTime
GetTimeZoneInformation
HeapSize
InterlockedExchangeAdd
GetCurrentThreadId
CreateMutexA
SetThreadIdealProcessor
CloseHandle
CompareStringA
GetCPInfo
GetEnvironmentStrings
GetProfileStringA
GetCurrentThread
GlobalHandle
ReadFile
GlobalDeleteAtom
TerminateProcess
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 209KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ