Static task
static1
Behavioral task
behavioral1
Sample
0224a8d397d041489c3e0a0827887ca0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0224a8d397d041489c3e0a0827887ca0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0224a8d397d041489c3e0a0827887ca0_JaffaCakes118
-
Size
309KB
-
MD5
0224a8d397d041489c3e0a0827887ca0
-
SHA1
d4d378ac24afb5de4d1ff53a31ac6911d887386e
-
SHA256
9503de40cbcc54d4a06dc87eb76f928ba73ce062356dd84f0c2980cf0390057f
-
SHA512
addd5ee055bab83146a56922fe07e04fc491f96a1dad5a022d2066ba50279f165ef595967941d0b2ec0dc9ba9f9d3216294da009ab35d7fb66671b89289187ee
-
SSDEEP
3072:YXML2YF9h5AI/rk1y9nB4rubz1kLlsm5pMbtEeyFVimp2GYsEo5Z5HCHnyT3IfTI:YVYFD53srubBkLlsm0tA8tGOohGnyEf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0224a8d397d041489c3e0a0827887ca0_JaffaCakes118
Files
-
0224a8d397d041489c3e0a0827887ca0_JaffaCakes118.exe windows:5 windows x86 arch:x86
8ed400738190fefc0e8c00bfb082535c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetCommandLineW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessVersion
GetShortPathNameW
GetStartupInfoA
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryW
LocalAlloc
LocalFree
FindNextFileA
OpenEventW
OpenFileMappingW
OpenMutexW
OpenProcess
ProcessIdToSessionId
QueryPerformanceCounter
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
WriteFile
lstrcatW
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrlenA
lstrlenW
FindFirstFileA
FindClose
CreateProcessW
CreateFileMappingW
CreateFileA
CreateEventW
CloseHandle
VirtualAllocEx
MapViewOfFile
CreateFileW
user32
SetFocus
MessageBoxA
IsDlgButtonChecked
IsDialogMessageA
TranslateMessage
EndDialog
DialogBoxParamA
CreateDialogParamA
CheckDlgButton
LoadIconW
ShowWindow
GetDesktopWindow
SetForegroundWindow
advapi32
RegOpenKeyExW
RegEnumKeyExA
RegOpenKeyA
RegOpenKeyExA
RegOverridePredefKey
RegQueryInfoKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
ole32
CoUninitialize
CoGetMalloc
CoCreateInstance
CoTaskMemRealloc
CoInitialize
shlwapi
wnsprintfA
StrFormatByteSize64A
Sections
.text14 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text13 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text12 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text11 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 246KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ