Static task
static1
Behavioral task
behavioral1
Sample
d5c8503d9451fcdf2919510b91b3071b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5c8503d9451fcdf2919510b91b3071b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5c8503d9451fcdf2919510b91b3071b_JaffaCakes118
-
Size
392KB
-
MD5
d5c8503d9451fcdf2919510b91b3071b
-
SHA1
141b2fe230de369e49537db526bb7a110f599e3d
-
SHA256
3c039a8764daa742e074305d449037b1f34e94cde47e8924126c31fd3fc26d25
-
SHA512
092b564e9de3fc255f8646de8b72025a7ee1f76add5f1c6bc42e8418861a13416534d8ec536a6a3a523ad223c920c5179e61c2137bd17ec41db02a0c028256fb
-
SSDEEP
6144:b+Y957nxei5X0uNyd/qM05ZuiIv5j30Yloaduzx8eukraRt0nsod5I4:b+ctZ5X0uNyd/qMwQFviXlEht0nn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5c8503d9451fcdf2919510b91b3071b_JaffaCakes118
Files
-
d5c8503d9451fcdf2919510b91b3071b_JaffaCakes118.exe windows:4 windows x86 arch:x86
6069ebfa44db73be5dd51adfca5a48ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Draw
CreatePropertySheetPage
ImageList_AddIcon
ImageList_BeginDrag
InitCommonControlsEx
ImageList_LoadImageW
DrawStatusText
ImageList_DragShowNolock
CreateUpDownControl
ImageList_DragMove
CreateStatusWindowW
ImageList_Copy
ImageList_GetFlags
_TrackMouseEvent
ImageList_Read
ImageList_GetIconSize
ImageList_GetImageCount
CreatePropertySheetPageA
DestroyPropertySheetPage
CreateStatusWindow
ImageList_Add
ImageList_DrawEx
ImageList_SetDragCursorImage
DrawInsert
ImageList_SetIconSize
kernel32
GetTimeZoneInformation
GetStringTypeW
GetFileAttributesExA
GetCPInfo
VirtualFree
FindFirstFileA
Sleep
GetProcAddress
HeapAlloc
CreateMutexA
VirtualQuery
VirtualAlloc
FileTimeToSystemTime
LoadLibraryA
GetUserDefaultLCID
GetLastError
IsValidLocale
WriteConsoleA
GetModuleFileNameA
IsValidCodePage
GetCommandLineA
EnumDateFormatsExA
InitializeCriticalSection
GetCurrentProcess
GetConsoleOutputCP
GetLocaleInfoA
VirtualProtect
QueryPerformanceCounter
HeapCreate
SetFilePointer
TerminateProcess
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetModuleHandleA
ReadFile
TlsGetValue
GetEnvironmentStringsW
GetCurrentThread
IsDebuggerPresent
WriteConsoleW
GlobalHandle
MultiByteToWideChar
OutputDebugStringA
GetCurrentThreadId
ExitProcess
LeaveCriticalSection
InterlockedIncrement
GetDateFormatA
WideCharToMultiByte
InterlockedExchange
GetTickCount
SetStdHandle
FreeEnvironmentStringsW
DeleteCriticalSection
GetFileType
GetConsoleMode
HeapDestroy
CloseHandle
HeapFree
GetPrivateProfileIntW
SetUnhandledExceptionFilter
ReadConsoleOutputCharacterA
GetProcessHeap
SetEnvironmentVariableA
GetLogicalDrives
CompareStringA
OpenFile
GetOEMCP
GlobalFree
GetLogicalDriveStringsW
InterlockedDecrement
CompareStringW
TlsSetValue
GetVersionExA
LCMapStringA
LockFile
GetPrivateProfileStringA
GetConsoleCP
FlushFileBuffers
WriteFile
GetNumberFormatA
GetACP
CreateFileA
GetStartupInfoA
GetTimeFormatA
GetCurrentProcessId
OpenMutexA
WriteFileEx
SetConsoleCtrlHandler
FreeEnvironmentStringsA
HeapSize
RtlUnwind
SetLastError
GetLocaleInfoW
GetEnvironmentStrings
GetStringTypeA
EnumSystemLocalesA
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
HeapReAlloc
FreeLibrary
GetUserDefaultLangID
GetCurrencyFormatA
SetThreadPriority
TlsAlloc
EnterCriticalSection
advapi32
RegEnumKeyW
user32
CreateAcceleratorTableW
EmptyClipboard
RegisterClassExA
LoadImageW
GetClipboardFormatNameW
GetUpdateRect
CharUpperA
GetClassInfoExW
RegisterClipboardFormatW
ArrangeIconicWindows
DefFrameProcA
GetDlgItemInt
GetWindowModuleFileNameW
EnumDesktopsA
CharPrevA
CheckMenuItem
GetFocus
GetPropA
EqualRect
wvsprintfA
EndDialog
ShowOwnedPopups
DrawTextExW
GetCaretBlinkTime
ShowCaret
GetScrollRange
DdeCreateDataHandle
ValidateRect
GetMenuState
SetWindowsHookA
GetMenuInfo
DestroyWindow
DefMDIChildProcA
EnumPropsW
GetAsyncKeyState
OpenDesktopA
RegisterClassA
Sections
.text Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ