c:\eedvkc\tiexdvs\aedev
Static task
static1
Behavioral task
behavioral1
Sample
f5e1b5955e069b96f2bb5b739222b91a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f5e1b5955e069b96f2bb5b739222b91a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f5e1b5955e069b96f2bb5b739222b91a_JaffaCakes118
-
Size
620KB
-
MD5
f5e1b5955e069b96f2bb5b739222b91a
-
SHA1
4ab9de4d9488eaaaa07d1fb70090d4b6b3958cef
-
SHA256
ca8e8880f3b7a820d451949aa6ba72098f21ee3d6e0d2ceba3c0a75197d995d2
-
SHA512
7e09fe3012122080dbc0b0822f31397961083e1b2ad52d7b15da494beb1ab5004eff9449964fd2940417cb04eb325d0f45f21e9b66bfde40cd0e9a42c221f09f
-
SSDEEP
12288:np+b+a+ieKWJjioWwOeYyecwAVoMV7cxnno5Hre0tLBQKXWh:np+b+SWJOoWXWjlYRoc0tDG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5e1b5955e069b96f2bb5b739222b91a_JaffaCakes118
Files
-
f5e1b5955e069b96f2bb5b739222b91a_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab8b8a473340eb62192f78b8e7e90efc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
SHQueryRecycleBinA
ShellExecuteExA
SheChangeDirA
kernel32
TlsGetValue
GetProcAddress
VirtualQuery
GetACP
GetCompressedFileSizeA
FreeLibrary
IsValidCodePage
MultiByteToWideChar
HeapFree
SetFilePointer
HeapCreate
VirtualFree
lstrcpy
FormatMessageA
SetUnhandledExceptionFilter
InterlockedDecrement
OpenFileMappingW
OpenFileMappingA
WriteProfileStringA
OpenMutexA
AllocConsole
ReadFile
GetOEMCP
GetModuleFileNameA
GetTimeZoneInformation
GetComputerNameA
LocalCompact
WriteConsoleA
SetLastError
GetFullPathNameA
CreateMutexA
WaitCommEvent
CloseHandle
SetLocaleInfoW
TlsFree
IsValidLocale
GetProfileIntA
GetConsoleOutputCP
GetLocaleInfoA
QueryPerformanceCounter
GetModuleHandleA
VirtualAlloc
EnumResourceNamesA
WideCharToMultiByte
OpenFile
InterlockedIncrement
SetConsoleCursorInfo
InterlockedExchange
GetCPInfo
GetVersionExA
EnumTimeFormatsA
GetDateFormatA
IsDebuggerPresent
SetVolumeLabelW
CreateFileA
GetLocaleInfoW
GetTickCount
HeapSize
GetConsoleCP
EnterCriticalSection
GetProcessHeap
SetFileAttributesW
SetStdHandle
GetCalendarInfoA
LCMapStringW
FreeEnvironmentStringsA
GetSystemTimeAsFileTime
DeleteCriticalSection
LoadLibraryExA
EnumResourceTypesA
HeapAlloc
GetLastError
GetShortPathNameA
TerminateProcess
LCMapStringA
GetCurrentThread
HeapReAlloc
GetCurrentProcessId
SetConsoleCtrlHandler
ReleaseMutex
Sleep
GetCommandLineA
InitializeCriticalSection
GetStringTypeA
GetStartupInfoA
FlushFileBuffers
LoadLibraryA
TlsSetValue
GetUserDefaultLCID
FindResourceExA
ExitProcess
SetHandleCount
TryEnterCriticalSection
SetPriorityClass
TlsAlloc
GetFileType
ResetEvent
UnhandledExceptionFilter
WaitForMultipleObjectsEx
WriteFile
GetCurrentThreadId
WriteConsoleW
lstrcpynW
GetCurrentProcess
RtlUnwind
GetConsoleMode
LeaveCriticalSection
GetPrivateProfileSectionNamesW
SetEnvironmentVariableA
ReadConsoleOutputW
IsBadWritePtr
GetEnvironmentStringsW
CompareStringW
GetStartupInfoW
GetProcessShutdownParameters
GetEnvironmentStrings
GetTimeFormatA
FreeEnvironmentStringsW
CompareStringA
GetCommandLineW
GetStdHandle
GetStringTypeW
SetFileTime
HeapDestroy
EnumSystemLocalesA
FreeResource
wininet
GopherGetLocatorTypeA
FtpGetFileSize
user32
DispatchMessageW
GetComboBoxInfo
DefDlgProcW
MessageBeep
UpdateWindow
DlgDirSelectComboBoxExA
MessageBoxA
EndPaint
GetInputDesktop
RealGetWindowClass
UnhookWindowsHookEx
IsDialogMessageA
GetClipboardFormatNameA
EnumDesktopWindows
SendInput
ChangeDisplaySettingsExA
ClipCursor
GetMessageA
SetWindowLongW
ShowWindow
CallNextHookEx
OemToCharBuffA
GetUserObjectSecurity
SetDeskWallpaper
EndDeferWindowPos
RegisterClassExA
GetThreadDesktop
CheckDlgButton
CharNextW
GetWindowRect
IsWindowEnabled
DrawFrame
GetClipboardViewer
MessageBoxExA
IsCharUpperW
CreateMDIWindowW
DefWindowProcW
GetAltTabInfo
TranslateAccelerator
GetClassLongA
DestroyWindow
SetWindowRgn
CreateAcceleratorTableW
CreateDesktopA
ActivateKeyboardLayout
CreateDesktopW
GetMenu
RegisterClassA
FlashWindowEx
DdeImpersonateClient
GetActiveWindow
GetClassInfoExA
CharToOemW
CloseWindowStation
InflateRect
CreateWindowExA
RemovePropA
comctl32
ImageList_Add
ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_Merge
ImageList_DragLeave
InitCommonControlsEx
ImageList_DrawIndirect
ImageList_Remove
CreatePropertySheetPageW
ImageList_SetBkColor
ImageList_Replace
ImageList_LoadImageA
CreateToolbarEx
ImageList_Write
ImageList_ReplaceIcon
ImageList_SetFlags
Sections
.text Size: 184KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ