Static task
static1
Behavioral task
behavioral1
Sample
c93864f5ca40297656f9760729b1d3ce_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c93864f5ca40297656f9760729b1d3ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c93864f5ca40297656f9760729b1d3ce_JaffaCakes118
-
Size
116KB
-
MD5
c93864f5ca40297656f9760729b1d3ce
-
SHA1
3dd948403e8fad2b0ac5df512a58802a40794141
-
SHA256
59e90967cd539c2b18399993d5fc8fefa2267872a149d8cc17e83ef1f3cd3d74
-
SHA512
58b799443311dfb37c44d93734db8346d16018775067d1f3ddc940beb6419aed4d3d983111ad56124817109489a7c98b2512ecfad837f34b38da63c07d786f2a
-
SSDEEP
3072:LGqBXhFd89A5BmC7GFqkHhwfbNtKrJD0IBJsth/Zaar:ndB5BmC7GFRWfbNtY9sLay
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c93864f5ca40297656f9760729b1d3ce_JaffaCakes118
Files
-
c93864f5ca40297656f9760729b1d3ce_JaffaCakes118.exe windows:5 windows x86 arch:x86
bc57bef360eb5d589792156597f1341a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResumeThread
GetLastError
GetCurrentThread
CreateProcessA
SetErrorMode
VirtualProtect
LeaveCriticalSection
UnmapViewOfFile
DeleteCriticalSection
QueryPerformanceFrequency
GetSystemTimeAsFileTime
SystemTimeToFileTime
IsValidLocale
ExpandEnvironmentStringsA
GetTickCount
VirtualAlloc
GlobalAlloc
GetTempPathA
InterlockedExchange
LockFile
LoadLibraryA
GetSystemDirectoryW
FindResourceW
GetWindowsDirectoryA
GetCurrentProcessId
GetDiskFreeSpaceA
EnterCriticalSection
GlobalDeleteAtom
GetTimeZoneInformation
FindClose
CompareStringW
lstrcmpA
GetCurrentThreadId
HeapReAlloc
GetModuleFileNameA
GetStartupInfoW
FileTimeToSystemTime
FindResourceA
GetSystemInfo
lstrcmpiW
ExpandEnvironmentStringsW
DeviceIoControl
GetEnvironmentVariableA
QueryPerformanceCounter
GetLocalTime
GetStringTypeA
GetCurrentDirectoryA
VirtualFree
GlobalHandle
SearchPathW
user32
DeleteMenu
GetMenu
ValidateRect
GetDlgItem
GetFocus
GetParent
CallWindowProcW
SetCapture
CharUpperA
GetSubMenu
GetWindowPlacement
PostThreadMessageW
DispatchMessageW
GetScrollInfo
DefWindowProcW
CharNextA
EnableMenuItem
GetMessageTime
LoadCursorA
RedrawWindow
EqualRect
FindWindowW
CallWindowProcA
ReleaseCapture
CharUpperW
SendDlgItemMessageW
DestroyWindow
GetPropA
GetAsyncKeyState
EndDialog
advapi32
RegSetValueExW
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryInfoKeyW
InitializeSecurityDescriptor
msvcrt
__set_app_type
_exit
memset
wcsncmp
__p__commode
exit
_onexit
__getmainargs
??0exception@@QAE@XZ
_errno
_stricmp
_XcptFilter
??_U@YAPAXI@Z
??3@YAXPAX@Z
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ