Static task
static1
Behavioral task
behavioral1
Sample
b5971301f84cc488ddb9e6881c39d94d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5971301f84cc488ddb9e6881c39d94d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b5971301f84cc488ddb9e6881c39d94d_JaffaCakes118
-
Size
487KB
-
MD5
b5971301f84cc488ddb9e6881c39d94d
-
SHA1
8bd74b97d40eeb5b28d94c6a86c37a07e384693c
-
SHA256
571e90508466c1850814f62a396390c380074af9adad24d2e4acb1e375e4fdb3
-
SHA512
b683f4289b76072fe3477700710442a0512d99d0da50410efbd13896e1d5d491b046131e2c45a06b35e2005afc7c92b721e4055126fa2dbd51e3ce28b0174e4f
-
SSDEEP
12288:HTY15G8qpg2Y7tk38xP8R51gAqt9bHDcmdbXkptL:UOvm2atKW7bciXEtL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5971301f84cc488ddb9e6881c39d94d_JaffaCakes118
Files
-
b5971301f84cc488ddb9e6881c39d94d_JaffaCakes118.exe windows:5 windows x86 arch:x86
88bc8fce6e889142648683f2c6c3b16e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
Sleep
DisableThreadLibraryCalls
InitializeCriticalSection
GetModuleHandleW
UnhandledExceptionFilter
LoadLibraryA
GetCurrentProcessId
CreateFileW
FreeLibrary
GetTickCount
CloseHandle
GetTickCount
QueryPerformanceCounter
SetLastError
GetCurrentProcess
GetLastError
GetModuleFileNameA
DeleteCriticalSection
InterlockedExchange
DeleteCriticalSection
lstrcmpiW
EnterCriticalSection
Sleep
GetProcessHeap
GetCurrentThreadId
DeleteCriticalSection
GetTickCount
GetVersionExA
GetTickCount
CloseHandle
DeleteCriticalSection
CreateEventW
DeleteCriticalSection
GetProcAddress
InitializeCriticalSection
LocalFree
InterlockedIncrement
GetVersionExA
HeapAlloc
DisableThreadLibraryCalls
HeapAlloc
InitializeCriticalSection
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
Sleep
CreateEventW
HeapFree
InterlockedIncrement
GetModuleHandleW
DeleteCriticalSection
GetCurrentProcessId
DisableThreadLibraryCalls
MultiByteToWideChar
InitializeCriticalSection
CloseHandle
InterlockedDecrement
user32
GetParent
GetDC
PeekMessageW
wsprintfA
CharNextW
TranslateMessage
EndDialog
DestroyWindow
CharNextW
SetForegroundWindow
wsprintfA
wsprintfA
GetDC
CreateWindowExW
DestroyWindow
GetSystemMetrics
SendDlgItemMessageW
DispatchMessageW
GetFocus
ReleaseDC
LoadStringW
BeginPaint
DestroyWindow
GetClientRect
CreateWindowExW
ShowWindow
DispatchMessageW
BeginPaint
GetWindowRect
wsprintfA
GetClientRect
SetTimer
CharNextW
GetDC
SetWindowPos
SetCursor
BeginPaint
IsWindow
PostMessageW
LoadStringW
MessageBoxW
GetDC
GetFocus
CharNextW
CharNextW
EndPaint
TranslateMessage
IsWindow
SetFocus
wsprintfA
DefWindowProcW
CharNextW
EndDialog
GetParent
ShowWindow
Sections
.text Size: 481KB - Virtual size: 972KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ