Static task
static1
Behavioral task
behavioral1
Sample
cb773cb211f29f47bb38e41e808ff224_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
cb773cb211f29f47bb38e41e808ff224_JaffaCakes118
-
Size
416KB
-
MD5
cb773cb211f29f47bb38e41e808ff224
-
SHA1
d2f3890916ce4a93b2aef7bacd60efd9e3f7e096
-
SHA256
2c8b0ccf5a48d1d2ec178d35c7fe681bd490e50e5958bb8f4ac484ca0dd7d8d4
-
SHA512
6d5f9e455a882b315f92bdb6e2abbff5f9a4df05a62d1aa5c07728e360712c77ae185ab461d116912e9473c8aa5c9cdf41172e4eaa5adeeaef5fd8f4557a1bde
-
SSDEEP
6144:fytXj0COCPRNw5OySm7OaEPDwQGybvkq/qDYT6UGUNQGr5:fy5V9c56laWJt/qDYTbXNQGr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb773cb211f29f47bb38e41e808ff224_JaffaCakes118
Files
-
cb773cb211f29f47bb38e41e808ff224_JaffaCakes118.exe windows:5 windows x86 arch:x86
56e102d88000fb84575e93619064ae2c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowW
IsIconic
GetMessageW
TranslateMessage
DispatchMessageW
LoadCursorW
LoadIconW
RegisterClassExW
PostMessageW
DefWindowProcW
DialogBoxParamW
BeginPaint
EndPaint
PostQuitMessage
SetFocus
DestroyWindow
EndDialog
CreateWindowExW
UpdateWindow
ShowWindow
MessageBoxW
RemovePropW
GetClassNameW
RemoveMenu
ScreenToClient
kernel32
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringEx
HeapSize
GetStringTypeW
HeapReAlloc
WriteConsoleW
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
GetStartupInfoA
GetModuleHandleW
GetCommandLineW
GetTempPathW
GetSystemInfo
GetLastError
Sleep
GetVersionExW
SetLastError
CloseHandle
RtlUnwind
GetFileType
IsDebuggerPresent
GetCPInfo
GetCommandLineA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
CreateFileW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
HeapAlloc
RaiseException
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
gdi32
DeleteDC
CreateCompatibleBitmap
shell32
CommandLineToArgvW
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ