Static task
static1
Behavioral task
behavioral1
Sample
0355e05993d4991e40c90cb82b1f362a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0355e05993d4991e40c90cb82b1f362a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0355e05993d4991e40c90cb82b1f362a_JaffaCakes118
-
Size
55KB
-
MD5
0355e05993d4991e40c90cb82b1f362a
-
SHA1
6efe46d1c149ba02c57374c8b5a869f2ff5eb3dd
-
SHA256
64c4c3e69d916e3d02361ba17b26a161c55257e6189ca2e7490dd3c67765ce6b
-
SHA512
4153004732086ea9dcb2acc4e8e8ad331ca92e3677518fffd45962d72447a86bc6307e3bebeed9f53bff7565cd879251cf58600a9436fb67f47b4645fc228af5
-
SSDEEP
768:qalMuxEx2yh+jwk9TgYn4wvsmA7pImPFhYJKpDxw8:qaxELQGmA73dhfpG8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0355e05993d4991e40c90cb82b1f362a_JaffaCakes118
Files
-
0355e05993d4991e40c90cb82b1f362a_JaffaCakes118.exe windows:5 windows x86 arch:x86
655b4d602d50534838f029cb0c73d49f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegConnectRegistryW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
kernel32
LocalFree
lstrcmpW
ReleaseMutex
WaitForSingleObject
CreateThread
SetEvent
CloseHandle
SetPriorityClass
OpenProcess
TerminateProcess
CreateEventW
CreateMutexW
lstrlenW
lstrcmpiW
lstrcpyW
GetComputerNameW
LocalAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetProcAddress
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
LoadLibraryA
LCMapStringA
LCMapStringW
user32
SendDlgItemMessageW
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
CreateDialogParamW
LoadCursorW
PostQuitMessage
SetClassLongW
LoadIconW
PostMessageW
MessageBoxW
SetFocus
DestroyWindow
EnableWindow
GetDlgItem
DialogBoxParamW
PeekMessageW
SetCursor
SendMessageW
wsprintfW
EndDialog
SetDlgItemTextW
GetDlgItemTextW
SetDlgItemInt
CheckRadioButton
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ