Static task
static1
Behavioral task
behavioral1
Sample
b512c86bc7eb69de015fdb6322268671_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b512c86bc7eb69de015fdb6322268671_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b512c86bc7eb69de015fdb6322268671_JaffaCakes118
-
Size
324KB
-
MD5
b512c86bc7eb69de015fdb6322268671
-
SHA1
d6f9a97b02f2ce810e0d4b563399879efd77c217
-
SHA256
6138d1c0975f14a05c602bcc297748485515b0dbd8e4dee8cab723b69c4cd6f2
-
SHA512
27c3839bfefcecf046c5a4ffb8e4d0d78003858fe4d5693841b346fd725e1e6cea4858245e1eebb72a84e45e0e941c6e8e4c88d90fe0a7835f44ff8429c717ce
-
SSDEEP
1536:VsryVNceslR03pHkULibvyEM5x5Hk480vO1hAEK3ugWrM8w7USOwSvP:pNol8L4Wx5HkjcOe3ugkwSvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b512c86bc7eb69de015fdb6322268671_JaffaCakes118
Files
-
b512c86bc7eb69de015fdb6322268671_JaffaCakes118.exe windows:5 windows x86 arch:x86
de0e32971dd7c5dce5b03d1b1a0deb64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteKeyA
PathFileExistsA
StrNCatA
StrStrIA
StrToIntA
wnsprintfA
kernel32
GetTickCount
GetWindowsDirectoryA
WriteFile
Sleep
CreateProcessA
ReadFile
lstrcatA
FindFirstFileA
lstrcmpiA
FindClose
GetPrivateProfileStringA
Process32Next
GetModuleFileNameA
FindNextFileA
GetVersionExA
CloseHandle
GetTempPathA
CreateThread
lstrcpynA
TerminateProcess
GetSystemTimeAsFileTime
SetStdHandle
Process32First
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetConsoleMode
GetConsoleCP
RtlUnwind
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetCurrentProcess
SetEndOfFile
MoveFileExA
SetFilePointer
lstrcmpA
GetFileSize
CreateFileA
GetComputerNameA
DeleteFileA
GetModuleHandleA
RemoveDirectoryA
SetLastError
GetLastError
GetFileAttributesA
GetProcessHeap
HeapFree
HeapAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetLocaleInfoA
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCommandLineA
GetStartupInfoA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapSize
ExitProcess
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
user32
FillRect
LoadIconA
GetClientRect
ExitWindowsEx
BeginPaint
IsDialogMessageA
TranslateMessage
GetWindowLongA
SendDlgItemMessageA
GetDlgItem
DefWindowProcA
SetWindowPos
ShowWindow
DispatchMessageA
AdjustWindowRectEx
SystemParametersInfoA
SetWindowTextA
LoadImageA
UpdateWindow
LoadCursorA
SendMessageA
PostQuitMessage
RegisterClassExA
GetWindowRect
GetMessageA
DestroyWindow
EndPaint
CreateWindowExA
gdi32
BitBlt
GetTextExtentPoint32A
CreateFontA
SetBkMode
SelectObject
CreateCompatibleDC
GetObjectA
GetStockObject
CreateSolidBrush
TextOutA
DeleteDC
advapi32
RegDeleteKeyA
RegSetValueExA
RegEnumKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
shell32
SHFileOperationA
ShellExecuteA
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 243KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ