Static task
static1
Behavioral task
behavioral1
Sample
053933b545ef12b7d4ea77d7e8702cac_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
053933b545ef12b7d4ea77d7e8702cac_JaffaCakes118
-
Size
3.0MB
-
MD5
053933b545ef12b7d4ea77d7e8702cac
-
SHA1
0585c67514407812c14e05a1cbe97c433c1c3229
-
SHA256
6489c771d49d4316f17a8f23b37c3e3357b840c67824867469312c92b3735cb9
-
SHA512
1b05ecb8e6d3d63468e85b35b9dde679edabf5c7611a889f8e88b2d3f82d6d5dcc8cb465a4e6612c793ccb7a3623730af51e3b8e7eeedef78420b0af40f00e64
-
SSDEEP
49152:63VR4SoHj/TQX+RrcxRYvD5iItcttflBh9NpFS7pooB30nInV/9SbPKrKtYFm8gs:6vZoHAX5eRCtdh95SB0In97D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 053933b545ef12b7d4ea77d7e8702cac_JaffaCakes118
Files
-
053933b545ef12b7d4ea77d7e8702cac_JaffaCakes118.exe windows:5 windows x86 arch:x86
c40973d1de84a5e7c3594c9c7a48568d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoW
RemoveDirectoryW
WaitCommEvent
GlobalDeleteAtom
SetTapePosition
ExitProcess
GetProfileIntA
GetDriveTypeA
GetNamedPipeHandleStateW
GetProcAddress
LoadLibraryA
DebugSetProcessKillOnExit
DeleteFileW
GetTempFileNameW
EscapeCommFunction
EndUpdateResourceA
SetHandleInformation
SetComputerNameW
IsBadHugeWritePtr
Beep
PeekNamedPipe
OutputDebugStringA
DefineDosDeviceW
FindResourceA
SetHandleCount
GetDriveTypeW
GetProcessIoCounters
OpenFileMappingW
GetBinaryTypeA
GetLastError
InterlockedIncrement
lstrcmpiW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
SetSystemTimeAdjustment
GetPrivateProfileIntW
GetProcessTimes
GetShortPathNameW
GetProfileSectionW
GetCommConfig
DeleteAtom
GetStartupInfoA
EndUpdateResourceW
FindAtomA
GetFileAttributesExA
GetCompressedFileSizeA
GetFileAttributesW
FindNextChangeNotification
ConnectNamedPipe
GlobalAlloc
GlobalSize
GetProfileSectionA
DebugBreakProcess
GetAtomNameW
SetFileApisToOEM
FindFirstChangeNotificationW
CreatePipe
lstrcpyW
UpdateResourceW
BeginUpdateResourceW
EraseTape
CreateIoCompletionPort
CreateFileA
GetDiskFreeSpaceW
TlsGetValue
GlobalUnlock
QueryPerformanceCounter
WriteFile
SetFileShortNameW
GetVersionExA
GlobalGetAtomNameA
GetCommTimeouts
CreateProcessW
LoadModule
CreateMailslotW
GetCurrentThread
CreateDirectoryA
MapViewOfFileEx
EnumResourceNamesA
IsSystemResumeAutomatic
GetPrivateProfileStringA
GetTapeParameters
EnumResourceNamesW
SetFileApisToANSI
GetPrivateProfileSectionW
CreateDirectoryW
SetUnhandledExceptionFilter
MoveFileW
PurgeComm
OpenMutexA
TlsSetValue
BuildCommDCBAndTimeoutsW
IsBadReadPtr
MoveFileExW
GetOverlappedResult
RemoveDirectoryA
GlobalUnWire
GetLongPathNameW
SetSystemTime
SetThreadExecutionState
GetNumaNodeProcessorMask
SetVolumeLabelA
HeapWalk
ReleaseSemaphore
GlobalAddAtomA
FindFirstFileW
MulDiv
GetTimeZoneInformation
CreateSemaphoreA
CreateMutexA
CreateDirectoryExA
GetModuleFileNameA
GetLogicalDrives
BackupSeek
LockFile
LoadLibraryW
EnumResourceLanguagesW
GetThreadPriority
CreateEventW
HeapQueryInformation
GetFullPathNameW
LockResource
SetDefaultCommConfigW
GetSystemTime
GetNumaAvailableMemoryNode
SearchPathA
FindAtomW
lstrcatW
SetStdHandle
VirtualQuery
CreateProcessA
FormatMessageA
IsBadCodePtr
GetPrivateProfileStructW
SystemTimeToTzSpecificLocalTime
VirtualLock
GetProfileIntW
CreateSemaphoreW
CopyFileW
FindFirstChangeNotificationA
SetEnvironmentVariableW
GetCurrentDirectoryW
SetDefaultCommConfigA
GetVersionExW
GetProcessAffinityMask
UnlockFileEx
BackupRead
GetFileSizeEx
GetCommModemStatus
SetFileAttributesW
GetPrivateProfileSectionNamesA
GetDiskFreeSpaceExW
GetHandleInformation
AddAtomW
SetCommState
GetProcessHeap
CreateFileW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoA
GetModuleHandleA
IsValidCodePage
GetOEMCP
SetCurrentDirectoryW
GetPrivateProfileIntA
GetCurrentThreadId
lstrlenW
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetACP
GetCurrentProcessId
GetTickCount
GetEnvironmentStrings
InitializeCriticalSectionAndSpinCount
CloseHandle
FlushFileBuffers
GetConsoleMode
SetThreadPriorityBoost
RaiseException
FatalAppExitW
SetFileShortNameA
GetTempPathA
FreeEnvironmentStringsA
GetStdHandle
GetCurrentProcess
OpenFileMappingA
QueryDosDeviceW
SetLastError
CancelDeviceWakeupRequest
lstrlenA
GetFileSize
GetEnvironmentStringsW
CallNamedPipeW
FormatMessageW
SetFilePointer
GetDiskFreeSpaceA
lstrcpynA
SetLocalTime
SetComputerNameA
GetSystemWindowsDirectoryA
GlobalFindAtomW
AddAtomA
LocalCompact
SetTapeParameters
GlobalAddAtomW
WideCharToMultiByte
GlobalMemoryStatus
FreeEnvironmentStringsW
GetEnvironmentVariableA
SetEndOfFile
GetSystemWindowsDirectoryW
GetProcessPriorityBoost
GetProcessId
GetPriorityClass
OpenEventW
GetFirmwareEnvironmentVariableW
EnumResourceTypesW
GetSystemTimeAsFileTime
LocalShrink
ReadFile
TerminateProcess
GetProcessHeaps
LocalFileTimeToFileTime
DeviceIoControl
GetWriteWatch
SetSystemPowerState
GetTempFileNameA
GetSystemDirectoryW
GetFileAttributesExW
SetFirmwareEnvironmentVariableA
CreateFileMappingA
FlushInstructionCache
OpenFile
GetBinaryTypeW
IsBadWritePtr
GlobalUnfix
SetNamedPipeHandleState
SleepEx
FindClose
RequestDeviceWakeup
GetEnvironmentVariableW
GetShortPathNameA
GetExitCodeProcess
ReleaseMutex
InterlockedCompareExchange
InterlockedExchange
Sleep
RtlUnwind
HeapFree
HeapAlloc
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetCommandLineA
LCMapStringA
LCMapStringW
GetStringTypeW
TlsAlloc
TlsFree
HeapSize
HeapCreate
VirtualFree
FatalAppExitA
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetFileType
GetConsoleCP
user32
RealGetWindowClassW
LoadStringW
SetWindowPos
GetClassNameW
MessageBoxW
GetWindowRect
RealGetWindowClassA
SetWindowTextW
DestroyWindow
CharNextW
ShowWindow
EnumChildWindows
SystemParametersInfoW
CharLowerW
CharUpperW
GetClassNameA
SetWindowLongW
SendMessageW
CallWindowProcW
MoveWindow
advapi32
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
shell32
ShellExecuteW
ole32
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
oleaut32
VarUI4FromStr
comctl32
ord17
Sections
.text Size: 402KB - Virtual size: 401KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ