Static task
static1
Behavioral task
behavioral1
Sample
c793c6cffec40116e01a0fd8cb3db1a5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c793c6cffec40116e01a0fd8cb3db1a5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c793c6cffec40116e01a0fd8cb3db1a5_JaffaCakes118
-
Size
194KB
-
MD5
c793c6cffec40116e01a0fd8cb3db1a5
-
SHA1
515716ba7106221372919a1887fe86f5df8bfd48
-
SHA256
2b010468a7f487d995c40f7f441f790268259dfe366f12d6ada6ff1493330d59
-
SHA512
954e908dd684935df54db1c63c0adc5e70e5beb79b7b9888e10670b6f4e16e5af945049197a9b8140c8eb3cc991025a04341ff3e3ef489c74beca7c88ec03c14
-
SSDEEP
3072:7EnPq8OAdtX8Ag0FuR1wXED/O+3FB8go12dArsXknzlat:7X8BtX8AOR1kU/3bM1Estzlat
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c793c6cffec40116e01a0fd8cb3db1a5_JaffaCakes118
Files
-
c793c6cffec40116e01a0fd8cb3db1a5_JaffaCakes118.exe windows:5 windows x86 arch:x86
fd1433c3f5092e59142eb167c6b1117f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
GetMessageA
IsDialogMessageA
LoadIconA
MessageBoxW
RegisterClassExA
SetFocus
SetWindowTextW
TranslateMessage
UnregisterClassA
UpdateWindow
wvsprintfW
CharNextA
DialogBoxParamA
GetClassInfoA
CreateWindowExA
SystemParametersInfoA
RegisterClassA
EndDialog
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
LoadCursorA
SetCursor
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
SetForegroundWindow
ShowWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
PeekMessageA
DispatchMessageA
ExitWindowsEx
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
PostQuitMessage
advapi32
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyA
RegCloseKey
RegEnumValueA
kernel32
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
WriteConsoleA
HeapCreate
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
Sleep
GetModuleHandleW
RtlUnwind
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
VirtualFree
GetCurrentThreadId
VirtualAlloc
CloseHandle
CreateThread
GetLastError
CreateMutexA
ReleaseMutex
WaitForSingleObject
CopyFileA
MulDiv
FindClose
SetFilePointer
ReadFile
WriteFile
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcess
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetCommandLineA
GetStartupInfoA
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ