Static task
static1
Behavioral task
behavioral1
Sample
0b0b091ac861b38023b96f4418b3669a_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
0b0b091ac861b38023b96f4418b3669a_JaffaCakes118
-
Size
181KB
-
MD5
0b0b091ac861b38023b96f4418b3669a
-
SHA1
c018e2f75185ffca63f28bc42d1e86a10d31ebe6
-
SHA256
85cb47fc9c2a7130447df691da94bd5e3cf69e7f177240dab8e8f87a9c6f5b4e
-
SHA512
55c2ea4332ea6ca381898e534fc441d8db31b7bb4bdb89143a4c533db713b5a0d8e4d377d734e2b18525ecce14309a040e44ae208031066108b6532dbe7e3520
-
SSDEEP
768:jedkHVf/pghPBNrGdcNq0Ost18Tf1a05x5FxCkgfCwAKln91IZgAgCMjWWXwVFx:NkhPBlLkyJ0X5XCjisbOgAMjWWXwVF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b0b091ac861b38023b96f4418b3669a_JaffaCakes118
Files
-
0b0b091ac861b38023b96f4418b3669a_JaffaCakes118.exe windows:1 windows x86 arch:x86
5146b2b769fe3d27f4e8d32038b85a62
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginPaint
SetWindowPos
TranslateMessage
EndDialog
ReleaseCapture
OffsetRect
SetWindowPos
GetFocus
CopyRect
MessageBoxA
CopyRect
DestroyMenu
FillRect
LoadCursorW
MessageBoxA
UpdateWindow
GetWindowLongW
SetWindowLongW
SetWindowPos
DispatchMessageA
WinHelpW
WinHelpW
SendMessageA
GetKeyState
ReleaseDC
CallWindowProcW
LoadCursorW
CheckDlgButton
WinHelpW
GetDlgCtrlID
ReleaseDC
DestroyIcon
ReleaseDC
GetSystemMetrics
LoadStringA
RegisterClassW
EndDialog
advapi32
FreeSid
RegSetValueExW
RegEnumValueW
FreeSid
SetSecurityDescriptorDacl
RegDeleteValueW
OpenThreadToken
RegOpenKeyW
RegQueryValueExW
RegCreateKeyExA
GetTokenInformation
RegEnumKeyExW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegQueryInfoKeyW
RegOpenKeyExA
RegOpenKeyW
GetTokenInformation
RegOpenKeyExW
RegSetValueExW
InitializeAcl
GetLengthSid
RegSetValueExW
GetTokenInformation
OpenThreadToken
CloseServiceHandle
RegSetValueExA
RegSetValueExW
RegEnumValueW
RegDeleteKeyW
AddAccessAllowedAce
RegDeleteValueW
AllocateAndInitializeSid
CloseServiceHandle
RegCreateKeyExA
kernel32
InitializeCriticalSection
GetModuleHandleA
HeapAlloc
GetProcAddress
GetStartupInfoW
GetModuleHandleA
TerminateProcess
GetProcessHeap
lstrlenW
LocalAlloc
Sleep
VirtualAlloc
HeapReAlloc
GetStartupInfoA
GetCurrentProcess
GetProcessHeap
LeaveCriticalSection
ExitProcess
GetCurrentProcessId
FormatMessageW
FreeLibrary
SetLastError
DeleteCriticalSection
GetACP
QueryPerformanceCounter
SetUnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTickCount
EnterCriticalSection
GetCurrentThreadId
GetCommandLineA
SetLastError
MultiByteToWideChar
GetCurrentProcessId
LeaveCriticalSection
GetModuleHandleA
EnterCriticalSection
SetUnhandledExceptionFilter
DeleteCriticalSection
CreateThread
LeaveCriticalSection
GetCurrentThreadId
GetLastError
GetCurrentThreadId
LoadLibraryW
GetACP
HeapAlloc
Sections
.idata Size: 141KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.gdata Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 16KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE