Static task
static1
Behavioral task
behavioral1
Sample
c5b93ade217bd9a818c90976e3acc87b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c5b93ade217bd9a818c90976e3acc87b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c5b93ade217bd9a818c90976e3acc87b_JaffaCakes118
-
Size
286KB
-
MD5
c5b93ade217bd9a818c90976e3acc87b
-
SHA1
f1dd3f84c3b8f0782367ce8a38dc1da0aab64854
-
SHA256
3a2bb3e07800debe1877d52353ed905524625dd4fd40bb375ddce9e9cc7d2a7f
-
SHA512
4e3213abaab8b1495f78b55a90882c12c70da2cd686683800bfd211e472a4a7126d2366624cc85177638e9670ce8ea1e9cb13d493ed8b9bdf6dc04e0dc90713c
-
SSDEEP
3072:lhdf2HTrKylxOq/UlIbEEphx7+CWM/Ns7a9x4s:LUzuylsHlVEnJ+8ZZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5b93ade217bd9a818c90976e3acc87b_JaffaCakes118
Files
-
c5b93ade217bd9a818c90976e3acc87b_JaffaCakes118.exe windows:5 windows x86 arch:x86
21a497c85860c8c5eb13aa9848ea0e54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryA
LocalAlloc
LocalFree
LocalReAlloc
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrlenW
GetStartupInfoA
GetProcessHeap
GetCurrentProcess
GetComputerNameW
GetCommandLineW
FormatMessageW
ExitProcess
CloseHandle
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
GetModuleHandleW
user32
CloseClipboard
CreateCaret
CreateDialogParamW
CreateWindowExW
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyCaret
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
DrawAnimatedRects
DrawMenuBar
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
FindWindowW
GetClientRect
GetClipboardData
GetDC
GetDlgItem
GetKeyState
GetLastActivePopup
CheckDlgButton
GetMenuItemInfoW
GetMessagePos
GetProcessDefaultLayout
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowRect
HideCaret
InsertMenuItemW
IntersectRect
InvalidateRect
IsCharAlphaNumericW
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
KillTimer
LoadAcceleratorsW
LoadImageW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OpenClipboard
PeekMessageW
ReleaseCapture
ReleaseDC
ScrollWindowEx
SendDlgItemMessageW
SetCapture
SetCaretPos
SetClipboardData
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenuItemInfoW
SetScrollInfo
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowCaret
ShowCursor
ShowWindow
TrackPopupMenuEx
TranslateAcceleratorW
TranslateMessage
WinHelpW
wsprintfW
CharUpperW
CharUpperBuffW
CharNextW
CharLowerW
BringWindowToTop
BeginPaint
BeginDeferWindowPos
LoadCursorA
IsGUIThread
GetQueueStatus
PaintDesktop
GetClipboardViewer
IsWindowUnicode
OpenIcon
LoadIconA
GetMenu
gdi32
FlattenPath
AddFontResourceA
GetSystemPaletteUse
DeleteDC
comdlg32
PrintDlgExW
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegOpenKeyW
RegQueryValueExW
shell32
DragFinish
DragQueryFileW
ShellAboutW
ole32
ReleaseStgMedium
CoUninitialize
CoInitializeEx
CoCreateInstance
msvcrt
_exit
wcsrchr
wcsncpy
wcsncmp
wcslen
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_initterm
_purecall
exit
iswctype
iswprint
memmove
swprintf
wcscat
wcschr
wcscmp
wcscpy
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ