Static task
static1
Behavioral task
behavioral1
Sample
05cdbae31aebccb84f51ec04a089e4b7_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
05cdbae31aebccb84f51ec04a089e4b7_JaffaCakes118
-
Size
203KB
-
MD5
05cdbae31aebccb84f51ec04a089e4b7
-
SHA1
23f643e89f1f90d91e5f06031dcc7edeab7863ef
-
SHA256
eab1c76cc4ef1a61ad921515ac6f1e29bd2bc2e97643cf383b15c8813657ed01
-
SHA512
5b408aca5a2e9e8c0e4d690458b5c2c95bde90da6e07dc74d28a5562ce648680eeb4df8c9388b53d8ed084a691eaebee663d5194c44f76542a780c1de571b931
-
SSDEEP
3072:CCMyrhINy+wwpw2abozgawWCqrKH/m3N:CCLdOyg6Wg3H/m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05cdbae31aebccb84f51ec04a089e4b7_JaffaCakes118
Files
-
05cdbae31aebccb84f51ec04a089e4b7_JaffaCakes118.exe windows:1 windows x86 arch:x86
c7a6c57753b8cba577ac1608a77031df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
LoadLibraryW
CreateThread
UnhandledExceptionFilter
CreateFileW
GetCurrentProcess
lstrlenW
EnterCriticalSection
SetLastError
HeapReAlloc
GetCommandLineW
GetCurrentProcess
HeapAlloc
LocalFree
SetUnhandledExceptionFilter
GetModuleHandleA
GetModuleHandleW
HeapDestroy
VirtualAlloc
GetACP
FormatMessageW
DeleteCriticalSection
LocalFree
InitializeCriticalSection
WideCharToMultiByte
EnterCriticalSection
FormatMessageW
HeapDestroy
GetCurrentProcess
GetStartupInfoW
LocalFree
GetProcessHeap
HeapReAlloc
WaitForSingleObject
VirtualAlloc
SetFilePointer
LocalFree
HeapReAlloc
Sleep
SetUnhandledExceptionFilter
ReadFile
WriteFile
CreateThread
HeapFree
GetModuleFileNameA
GetVersionExA
user32
GetMessageW
FindWindowW
SendMessageW
GetWindowRect
GetDlgCtrlID
MoveWindow
MoveWindow
GetSubMenu
SetWindowLongW
CreateDialogParamW
GetFocus
ShowWindow
SetWindowPos
wsprintfW
DialogBoxParamW
SystemParametersInfoW
DefWindowProcW
GetSystemMenu
wsprintfW
GetKeyState
PostQuitMessage
wsprintfA
WinHelpW
CallWindowProcW
SendMessageA
WinHelpW
LoadCursorW
LoadStringA
ReleaseCapture
ShowWindow
CharNextW
IsWindowVisible
SetTimer
DrawTextW
wsprintfW
EnableWindow
InvalidateRect
CreateDialogParamW
TranslateMessage
DispatchMessageW
PeekMessageW
IsDlgButtonChecked
gdi32
CreateCompatibleBitmap
GetTextMetricsW
GetStockObject
GetTextExtentPoint32W
GetTextExtentPoint32W
BitBlt
SetBkMode
ExtTextOutW
GetStockObject
MoveToEx
SetTextColor
MoveToEx
BitBlt
MoveToEx
DeleteObject
StretchBlt
SetTextColor
PatBlt
GetStockObject
CreateSolidBrush
DeleteObject
TextOutW
GetDeviceCaps
DeleteObject
SetBkMode
TextOutW
SetBkMode
SetBkColor
CreateCompatibleDC
GetDeviceCaps
DeleteObject
CreateBitmap
SetBkMode
PatBlt
SetTextColor
MoveToEx
GetStockObject
CreateBitmap
TextOutW
LineTo
SetTextColor
GetStockObject
SelectObject
GetDeviceCaps
StretchBlt
SetBkMode
GetDeviceCaps
GetTextExtentPoint32W
Sections
.idata Size: 181KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.gdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.gdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE