Static task
static1
Behavioral task
behavioral1
Sample
05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118
-
Size
39KB
-
MD5
05952924d9d2f39a85b94689fd3bd5a0
-
SHA1
0041f2eaee0f8f63bd8d34081399d59ba8b756ef
-
SHA256
d5be5abdba87d3ce5e2934441eb9091f7f44af2bee9d581c6d04223fc72b46fe
-
SHA512
df8d7a46c44802dcecc6421e370ec1bb24bc37730837722fd5af42c4b3025edf2925f032981bc5bc18e5c2c576d95994505f67fb638a326132321e72c63f7ed6
-
SSDEEP
768:VHcBAAUixJYkWF2Y0TFLEGq2XNMiznJTVuXo0jUucGgn6y:EA9ixmkWwY0TFLEP2XNMibN6o0o/GKp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118
Files
-
05952924d9d2f39a85b94689fd3bd5a0_JaffaCakes118.exe windows:4 windows x86 arch:x86
57d30cf4c6fe8d9ef299ca199080a539
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AdjustWindowRect
DefDlgProcA
DeferWindowPos
GetWindowRect
EnumThreadWindows
GetNextDlgGroupItem
ChildWindowFromPoint
ArrangeIconicWindows
IsDialogMessageA
MoveWindow
BringWindowToTop
FindWindowA
LoadIconA
gdi32
Chord
Arc
EnumObjects
GetBrushOrgEx
CloseEnhMetaFile
ExtEscape
EqualRgn
AngleArc
CreateFontA
AddFontResourceA
DescribePixelFormat
CopyEnhMetaFileW
CopyEnhMetaFileA
advapi32
BackupEventLogA
RegReplaceKeyA
RegOpenKeyExA
OpenEventLogW
ReadEventLogA
kernel32
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
LeaveCriticalSection
GetCPInfo
GetStringTypeW
WaitForSingleObject
GlobalFlags
GetTimeFormatA
GetThreadLocale
IsBadWritePtr
EnterCriticalSection
InitializeCriticalSection
ReleaseSemaphore
HeapValidate
GetACP
WriteProfileStringA
GetProfileIntA
GetProcAddress
GetHandleInformation
VirtualAllocEx
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetOEMCP
winspool.drv
DeletePrinterDriverExA
ConnectToPrinterDlg
EnumJobsW
GetPrinterDriverW
GetPrinterDriverA
AddPrinterConnectionA
SetPrinterA
AbortPrinter
netapi32
NetUserChangePassword
NetLocalGroupDelMembers
NetConnectionEnum
NetGroupAdd
NetConfigSet
NetGetJoinInformation
NetAuditClear
NetFileGetInfo
NetAuditWrite
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fxjuwu Size: 331KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ