Static task
static1
Behavioral task
behavioral1
Sample
f53875299a926533dfe611fd74c89056_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f53875299a926533dfe611fd74c89056_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f53875299a926533dfe611fd74c89056_JaffaCakes118
-
Size
4.1MB
-
MD5
f53875299a926533dfe611fd74c89056
-
SHA1
49be6185d06a5bc3aec9421c93d831b3b2a11f6b
-
SHA256
1bb319a3ef8d3093ce3187e9f5a52f12b50c51d7ba8907f691580d8b5003dfc7
-
SHA512
9b5dd33d3e07c4e7f90c351ce0b6d591062c23c2e495ec7ae68f69ed7e24efbfd1fcbbafa6cff9ed91286697dc2e9103432f14db2e3231d28a77eb42136ef678
-
SSDEEP
24576:s7ThKAeELjNT4VfvlmUPDfckXXd8vLph9JBzaGvopqzKLkIjXcqtsXguNxx7sQY:scac1c3tXXkqOYSwxd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f53875299a926533dfe611fd74c89056_JaffaCakes118
Files
-
f53875299a926533dfe611fd74c89056_JaffaCakes118.exe windows:5 windows x86 arch:x86
39f66c9ae95e28b5f9fbfa2bc806c909
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeReconnect
DestroyIcon
CreateIcon
ScrollWindowEx
SetForegroundWindow
GetMenuDefaultItem
DestroyAcceleratorTable
CharPrevW
SendDlgItemMessageW
GetDlgItemInt
ShowWindowAsync
RegisterClassExW
ReplyMessage
kernel32
TlsGetValue
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
VirtualProtect
VirtualFree
GetVersionExW
GetModuleHandleA
FreeLibraryAndExitThread
VirtualAlloc
HeapAlloc
HeapReAlloc
HeapFree
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
WaitForMultipleObjects
CloseHandle
ClearCommBreak
SetupComm
FileTimeToDosDateTime
FormatMessageW
CreateEventW
GetDiskFreeSpaceW
GetCompressedFileSizeW
IsValidCodePage
MultiByteToWideChar
WideCharToMultiByte
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
IsProcessorFeaturePresent
SetLastError
GetCurrentThread
GetCurrentThreadId
GetProcessHeap
GetStdHandle
GetFileType
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
LoadLibraryW
TlsSetValue
TlsFree
GetTickCount
GetModuleHandleW
CreateSemaphoreW
IsDebuggerPresent
FreeLibrary
LoadLibraryExW
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CreateFileW
DuplicateHandle
WaitForSingleObject
GetExitCodeThread
CreateThread
ExitThread
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
Sections
.text Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.06w5u Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.au31 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ