d:\ydau\nxde
Static task
static1
Behavioral task
behavioral1
Sample
d553b6b9931ad93944a62c78a917ddee_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d553b6b9931ad93944a62c78a917ddee_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d553b6b9931ad93944a62c78a917ddee_JaffaCakes118
-
Size
360KB
-
MD5
d553b6b9931ad93944a62c78a917ddee
-
SHA1
403e00309e7ecb13cea704bfc8e4a3c887116cc4
-
SHA256
5befc8be3db98065dbd6531e843aed81600f187f78db441e0f267be83c788291
-
SHA512
887f8f055bc3cf18a5cb82a65e9bc0457bdd5a22052576f2dc4f2abc0e8b6874658b8c4ebab8973a0c0acb1fbeb3f78844830436991cb830d35aa95711133d63
-
SSDEEP
6144:Cr8+b0AFH2nEbRBkxFCFj1o80xN3yjeZUHGEFUv:v+4AFH2nURSxFCzpaN3FZ1ECv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d553b6b9931ad93944a62c78a917ddee_JaffaCakes118
Files
-
d553b6b9931ad93944a62c78a917ddee_JaffaCakes118.exe windows:4 windows x86 arch:x86
82d1bf32db984168cb0f6f1d63b843e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
CreatePropertySheetPageA
ImageList_DragMove
InitCommonControlsEx
ImageList_LoadImageA
ImageList_AddMasked
ImageList_SetImageCount
MakeDragList
gdi32
GetDeviceCaps
GetEnhMetaFileA
TranslateCharsetInfo
DescribePixelFormat
RemoveFontResourceA
GetColorSpace
GetTextCharsetInfo
GdiSetBatchLimit
SaveDC
kernel32
OpenSemaphoreW
LocalAlloc
GetLocaleInfoA
GetSystemTimeAsFileTime
SetStdHandle
HeapDestroy
LocalReAlloc
CompareStringA
CreateWaitableTimerA
FreeEnvironmentStringsW
LeaveCriticalSection
GetModuleFileNameW
GetLogicalDrives
GetConsoleOutputCP
ExitProcess
LockResource
EnumDateFormatsExA
VirtualQuery
WritePrivateProfileStringA
GetDateFormatA
TlsSetValue
GlobalFlags
MultiByteToWideChar
CloseHandle
GlobalReAlloc
LoadLibraryW
CreateMutexA
GetCommandLineA
OpenMutexA
ReadConsoleOutputCharacterA
GetCurrentProcess
WideCharToMultiByte
GetLogicalDriveStringsW
GetTempPathW
CreatePipe
FreeEnvironmentStringsA
LocalUnlock
UnlockFile
SetLastError
CreateToolhelp32Snapshot
ResetEvent
EnumTimeFormatsW
OpenFile
SetConsoleCtrlHandler
InitializeCriticalSection
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TransactNamedPipe
DeleteCriticalSection
GetConsoleMode
HeapSize
MoveFileExW
SetThreadContext
GetEnvironmentStringsW
GetLastError
GetUserDefaultLCID
ConvertDefaultLocale
GetPrivateProfileSectionNamesA
GetOEMCP
IsValidLocale
FreeLibrary
GetCommandLineW
RtlUnwind
IsValidCodePage
LCMapStringW
GetLocaleInfoW
EnumSystemLocalesW
GetFileType
OpenEventA
VirtualFree
TerminateProcess
EnumSystemLocalesA
TlsGetValue
VirtualAlloc
QueryPerformanceCounter
HeapAlloc
GetVersionExA
GetStdHandle
HeapReAlloc
WaitForMultipleObjectsEx
ResumeThread
GetThreadTimes
GetStartupInfoA
Sleep
GetConsoleTitleA
GetCompressedFileSizeA
GetCPInfo
EnumCalendarInfoExA
GetCurrentProcessId
WriteFile
GetConsoleCP
GetCurrentThreadId
WriteConsoleW
TlsFree
ReleaseMutex
CreateMutexW
SetEnvironmentVariableA
FlushFileBuffers
WriteConsoleA
LoadLibraryA
GetTimeFormatA
HeapFree
LocalShrink
EnterCriticalSection
GetStringTypeW
EnumCalendarInfoW
lstrcmpi
GetStartupInfoW
IsDebuggerPresent
TlsAlloc
EnumSystemCodePagesW
SetHandleCount
SetThreadAffinityMask
GetPrivateProfileIntA
GetTimeZoneInformation
LCMapStringA
OpenWaitableTimerW
InterlockedExchangeAdd
InterlockedIncrement
CreateFileW
LoadModule
ReadConsoleOutputW
GetStringTypeA
GetModuleFileNameA
HeapLock
EnumResourceTypesW
EnumDateFormatsExW
ConnectNamedPipe
CreateFileA
GetACP
InterlockedExchange
GetModuleHandleA
GetEnvironmentStrings
GetTickCount
InterlockedDecrement
CompareStringW
GetSystemTime
HeapCreate
ReadFile
GetDriveTypeA
GlobalCompact
GetDriveTypeW
GetDateFormatW
SetFilePointer
FindAtomW
WaitForSingleObjectEx
GetProcAddress
GetPrivateProfileIntW
GetCurrentThread
CreateFileMappingW
ReadConsoleOutputCharacterW
CreateDirectoryA
comdlg32
GetFileTitleW
PrintDlgW
PageSetupDlgA
ChooseColorW
user32
GetOpenClipboardWindow
SetSysColors
IntersectRect
RegisterClassExA
MapVirtualKeyExW
GetUserObjectSecurity
DdeSetQualityOfService
CopyRect
SetClassLongW
BroadcastSystemMessageW
ExcludeUpdateRgn
GetMenuStringW
GetUpdateRect
EnumWindowStationsW
CopyIcon
WINNLSGetIMEHotkey
GetClassNameW
GetClipboardSequenceNumber
GetKeyboardType
GetClipboardViewer
SetRect
RegisterClassA
SetWinEventHook
GetTabbedTextExtentW
GetDlgItemInt
SetScrollInfo
SetClipboardData
PackDDElParam
UnregisterHotKey
IsWindowVisible
DragDetect
MessageBoxW
DefDlgProcW
GetClassWord
SetMessageExtraInfo
BlockInput
advapi32
CryptHashData
CryptSetProviderW
CryptSetHashParam
CryptGetUserKey
CryptGetKeyParam
RegConnectRegistryW
DuplicateTokenEx
CryptDestroyHash
RegCloseKey
RegNotifyChangeKeyValue
LookupPrivilegeDisplayNameA
InitiateSystemShutdownW
CryptVerifySignatureW
AbortSystemShutdownW
RegQueryValueA
RegDeleteValueW
RegEnumKeyExW
AbortSystemShutdownA
CryptEncrypt
RegSetValueExA
LogonUserA
RegEnumValueW
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ