Static task
static1
Behavioral task
behavioral1
Sample
de578f8c30f2e812d5b462cdf6137c05_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
de578f8c30f2e812d5b462cdf6137c05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de578f8c30f2e812d5b462cdf6137c05_JaffaCakes118
-
Size
37KB
-
MD5
de578f8c30f2e812d5b462cdf6137c05
-
SHA1
d22eb5b0e4e1ff80871b51f439dec3391232272b
-
SHA256
1ed4bec06c1512f7f17cc0c83ca142f4d48b6c6abab16b09925da4736e0fcc12
-
SHA512
f658c6ce6e84646439cc7827fe563a9c1144c3e74621daa7b1e60ac04982e5d03ec0c8afeb8238ab70b85a9c834d3c1e56ed9a593c2c512054d9a051420d8a16
-
SSDEEP
768:ctU7DSjviwpBbgiTyS7/4Bu6yVSGu1vouTooEPUKM/FKls2t:sKDUlBbZeaau67voQ6c8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de578f8c30f2e812d5b462cdf6137c05_JaffaCakes118
Files
-
de578f8c30f2e812d5b462cdf6137c05_JaffaCakes118.exe windows:5 windows x86 arch:x86
ce3fe1317ac681356d4786db5f811b67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
ReadFile
GetCurrentThreadId
HeapDestroy
LeaveCriticalSection
VirtualAlloc
InterlockedExchange
HeapAlloc
UnhandledExceptionFilter
GetCurrentProcessId
GetProcessHeap
MultiByteToWideChar
HeapAlloc
InterlockedExchange
CloseHandle
EnterCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceCounter
GetVersionExA
CreateEventW
LocalAlloc
MultiByteToWideChar
ReadFile
GetCurrentThreadId
InterlockedCompareExchange
FreeLibrary
FreeLibrary
GetModuleFileNameW
InterlockedCompareExchange
DisableThreadLibraryCalls
CreateFileW
lstrlenA
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
InterlockedIncrement
GetModuleFileNameW
GetModuleHandleW
InterlockedIncrement
ReadFile
GetLastError
InitializeCriticalSection
GetProcAddress
lstrlenA
CreateFileW
LocalAlloc
CloseHandle
CreateThread
DisableThreadLibraryCalls
user32
KillTimer
EndPaint
ReleaseDC
GetParent
SetWindowLongW
DialogBoxParamW
SetWindowPos
BeginPaint
SetForegroundWindow
CreateWindowExW
SetCursor
GetParent
TranslateMessage
IsDlgButtonChecked
LoadStringW
PostQuitMessage
DialogBoxParamW
GetDesktopWindow
SetCursor
LoadCursorW
EndPaint
GetWindowRect
SetTimer
PostMessageW
GetWindowRect
GetDlgItem
GetDC
GetSysColor
IsWindow
EnableWindow
DialogBoxParamW
GetWindowLongW
SetFocus
IsWindow
IsDlgButtonChecked
IsDlgButtonChecked
EnableWindow
CharNextW
CharNextW
EndDialog
GetParent
EnableWindow
SetWindowPos
BeginPaint
IsWindow
DestroyWindow
PostMessageW
SetCursor
GetDesktopWindow
SendMessageW
Sections
.text Size: 32KB - Virtual size: 36KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ