Static task
static1
Behavioral task
behavioral1
Sample
b05b919b5e14e2af062ba5eb873bf831_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b05b919b5e14e2af062ba5eb873bf831_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b05b919b5e14e2af062ba5eb873bf831_JaffaCakes118
-
Size
104KB
-
MD5
b05b919b5e14e2af062ba5eb873bf831
-
SHA1
0b5b928dce6c759cac9a60e57035cf093004edb2
-
SHA256
895ecc53cccbf5744ca8f055e45372c89b8debcba1c719b151a9faab4aac75f9
-
SHA512
203fe40f4797cb153df2c96b828f2ff6ecbce93149d3c4deb4f94bde4723c54d05c0967bd8b79f636676cea31762b29295e56d75dcf8cfa93b6727dbed230842
-
SSDEEP
3072:AaQo03tPdZeVXq8xNR6tgR07WtU/Wbf8Wf:e0BXR0SUS8Wf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b05b919b5e14e2af062ba5eb873bf831_JaffaCakes118
Files
-
b05b919b5e14e2af062ba5eb873bf831_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d1e4fd2323ccd3397e6069b63cc0f2d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ExtractIconExA
SHGetSpecialFolderPathW
ShellExecuteExA
user32
GetDesktopWindow
SetWindowPos
EndDialog
FillRect
IsWindowVisible
GetDlgItemTextA
CharPrevA
GetParent
SystemParametersInfoA
EnableWindow
DestroyWindow
RegisterClassA
DrawTextA
CharNextA
PostQuitMessage
LoadBitmapA
GetWindowTextA
CreateDialogParamA
SetDlgItemTextA
SendDlgItemMessageA
GetDlgItem
GetClientRect
SetRect
GetWindowRect
LoadIconA
LoadCursorA
EndPaint
SetClassLongA
ScreenToClient
BeginPaint
urlmon
CreateURLMoniker
kernel32
WaitForSingleObject
GetProcessHeap
GetLocaleInfoA
IsValidCodePage
HeapAlloc
FindVolumeClose
FileTimeToLocalFileTime
FindFirstFileA
lstrcpynA
FindClose
VirtualFree
LCMapStringW
GetConsoleScreenBufferInfo
InitializeCriticalSection
GetStdHandle
SetEnvironmentVariableA
GetDriveTypeA
HeapFree
GetVolumeInformationA
GetShortPathNameA
LocalUnlock
CompareStringA
GetFileAttributesA
GetCurrentProcess
GetLocaleInfoW
GetDriveTypeA
GetVersionExA
GetConsoleMode
GetEnvironmentVariableA
GetModuleHandleA
LoadLibraryA
SetStdHandle
lstrcmpiA
SetConsoleMode
SetVolumeLabelA
GetStringTypeA
GetUserDefaultUILanguage
GetSystemTime
LCMapStringA
GetStringTypeW
LeaveCriticalSection
GetTimeZoneInformation
GetStartupInfoA
ReleaseMutex
GetFileTime
FileTimeToSystemTime
CreateMutexA
GetModuleFileNameA
GetModuleHandleExW
SetThreadPriorityBoost
GetUserDefaultLCID
HeapDestroy
VirtualAlloc
InterlockedExchange
GetFileType
SetHandleCount
CreateFileA
CompareStringW
FindNextFileA
IsValidLocale
GetFullPathNameA
HeapCreate
GetLocalTime
LocalLock
GetProcAddress
Sleep
EnumSystemLocalesA
FlushFileBuffers
WideCharToMultiByte
ExitProcess
lstrlenA
SetConsoleCtrlHandler
gdi32
GetNearestColor
OffsetClipRgn
CreateRectRgn
GetStockObject
GetClipRgn
SetBkColor
CreatePen
IntersectClipRect
SetTextColor
SelectObject
ole32
OleUninitialize
CoCreateInstance
OleInitialize
shlwapi
PathRemoveBackslashA
PathFileExistsW
SHDeleteValueA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE