Static task
static1
Behavioral task
behavioral1
Sample
d5789bc9baf87f1fefc8f2c9159353a9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5789bc9baf87f1fefc8f2c9159353a9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5789bc9baf87f1fefc8f2c9159353a9_JaffaCakes118
-
Size
260KB
-
MD5
d5789bc9baf87f1fefc8f2c9159353a9
-
SHA1
1dca3687cb29e675afe04443472d34b3e2ffe938
-
SHA256
cd380829530ad3cc93a8981b2eb2a681d8cec8f6b38e41cc3fea433d3b0bf762
-
SHA512
afe67bb8a0742230e54f95508ad2dd079581156fc983f0daff12a7bab7464051501a9b15f8cffdab6b0ef2b1621fe81544d24c2ec017cfb65536213bde86dec7
-
SSDEEP
6144:RNbsBke0A+6++i89jiOBqky3NnUXFUFZ:DbsBkG/l9fBVUs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5789bc9baf87f1fefc8f2c9159353a9_JaffaCakes118
Files
-
d5789bc9baf87f1fefc8f2c9159353a9_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e79b5c3f015a29c157f2a2b0eb82422
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetTempFileNameA
InitializeCriticalSection
VirtualProtect
AreFileApisANSI
TryEnterCriticalSection
_lread
ExitProcess
lstrcpyA
WritePrivateProfileStringW
VirtualLock
FlushFileBuffers
GetSystemTimeAsFileTime
GetFullPathNameA
IsBadReadPtr
DeleteFiber
SetCurrentDirectoryA
GetFileType
LeaveCriticalSection
FatalAppExitA
GetCommandLineA
lstrlenA
VirtualAlloc
user32
CallWindowProcW
EmptyClipboard
ShowScrollBar
WaitForInputIdle
IsChild
GetWindowDC
GetMonitorInfoA
CreateDialogIndirectParamA
CloseWindowStation
SetMessageQueue
CopyAcceleratorTableW
DrawTextExA
RegisterClassExA
GetKeyboardState
FindWindowExW
LoadCursorW
CheckMenuItem
EnumDesktopWindows
LoadImageW
GetWindowPlacement
GetProcessDefaultLayout
IsCharUpperW
MessageBoxExA
CharToOemBuffA
RegisterClipboardFormatA
ShowCursor
GetMenuStringA
GetMenu
GetClassNameW
GetWindowThreadProcessId
ShowOwnedPopups
ScreenToClient
AdjustWindowRect
CreateCaret
DrawTextA
GetWindowTextLengthW
UnregisterHotKey
BringWindowToTop
CreateDesktopW
ChildWindowFromPoint
DrawMenuBar
GetClipboardFormatNameW
OpenClipboard
GetSysColorBrush
GetCaretPos
DrawAnimatedRects
CopyImage
SetScrollInfo
SetScrollRange
ChangeDisplaySettingsW
SetProcessDefaultLayout
DialogBoxIndirectParamA
GetPropA
wsprintfW
DialogBoxIndirectParamW
EnableScrollBar
ChangeMenuA
SetWindowRgn
keybd_event
HiliteMenuItem
LoadBitmapA
LockWindowUpdate
IsWindowEnabled
gdi32
ExtEscape
CreateFontIndirectW
SetDIBColorTable
Chord
GetCurrentObject
SetDIBits
GetTextMetricsW
GetDIBits
WidenPath
CreateEllipticRgnIndirect
CombineRgn
DescribePixelFormat
SetTextJustification
SetRectRgn
CreateFontA
PlayMetaFileRecord
PlayMetaFile
GdiComment
CreateDCW
EnumFontFamiliesA
comdlg32
ChooseFontW
ReplaceTextA
CommDlgExtendedError
shell32
ExtractIconA
ole32
CoFileTimeNow
CoUninitialize
CreateOleAdviseHolder
CoInitializeEx
OleConvertIStorageToOLESTREAM
RevokeDragDrop
oleaut32
SafeArrayGetLBound
SafeArrayRedim
VariantCopy
SysStringLen
comctl32
PropertySheetA
shlwapi
SHDeleteKeyW
StrFormatKBSizeW
PathUndecorateW
ChrCmpIW
PathRemoveBackslashW
PathGetCharTypeW
StrToIntExW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 253KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE