Static task
static1
Behavioral task
behavioral1
Sample
0c51b26628cc951116203f9bddc6a9f0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0c51b26628cc951116203f9bddc6a9f0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0c51b26628cc951116203f9bddc6a9f0_JaffaCakes118
-
Size
101KB
-
MD5
0c51b26628cc951116203f9bddc6a9f0
-
SHA1
9bd1091f83cfa1c4dba92fedbdc0536801959ef3
-
SHA256
801b8ffaeffd7d83308037771c2a61d2f13527238b983c64dd5aed2ba453222c
-
SHA512
cad5dc5e6e8a7a153ee8fad76ec10c5d3425a53773f1874f73d18ab4af7576b9ac378976d821bebe0bb002aa943a60f991fdbab16b3756817f4cb93c81f03112
-
SSDEEP
1536:J+GSvSL3+FiN8xcMEfKW5Irdg3E0tP//loDN0qH3WEJc5e/YXbU:JjSvSL3+83bfKEIOU0tfaNTlJKe/YXQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c51b26628cc951116203f9bddc6a9f0_JaffaCakes118
Files
-
0c51b26628cc951116203f9bddc6a9f0_JaffaCakes118.exe windows:5 windows x86 arch:x86
5d6e73ee1b6ace784f5a8f10a1af4bae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendDlgItemMessageW
WinHelpW
SetCursor
InsertMenuItemW
GetDC
ReleaseDC
SetFocus
GetWindowLongW
EndDialog
SetDlgItemTextW
LoadImageW
MessageBoxW
GetParent
SendMessageW
DialogBoxParamW
GetDlgItem
EnableWindow
wsprintfW
GetDlgItemTextA
LoadCursorW
SetWindowLongW
RegisterClipboardFormatW
LoadIconW
LoadBitmapW
SetWindowTextW
LoadStringW
SystemParametersInfoW
PostMessageW
kernel32
OutputDebugStringA
DeleteCriticalSection
GetSystemDefaultLangID
GetProcAddress
QueryPerformanceCounter
GetCurrentProcess
InterlockedDecrement
InitializeCriticalSection
GetModuleFileNameW
WideCharToMultiByte
GetComputerNameW
lstrcpyW
GetModuleHandleA
GetDateFormatW
GetSystemTimeAsFileTime
GlobalUnlock
GetTickCount
GetCPInfo
GlobalFree
GetEnvironmentStringsW
IsBadReadPtr
CreateFileW
lstrcmpiW
lstrlenW
RemoveDirectoryA
LocalFree
GlobalLock
CloseHandle
GlobalAlloc
InterlockedIncrement
FormatMessageW
OutputDebugStringW
LocalReAlloc
FileTimeToLocalFileTime
GetLastError
SetLastError
GetSystemWindowsDirectoryW
GetStartupInfoA
SetUnhandledExceptionFilter
LoadLibraryW
FileTimeToSystemTime
certcli
CACertTypeGetSecurity
CAEnumNextCertType
CAUpdateCertType
CAFreeCAProperty
CAFreeCertTypeExtensions
CAEnumCertTypesForCA
CAGetCertTypeKeySpec
CAUpdateCA
CACertTypeSetSecurity
CASetCertTypeKeySpec
CASetCertTypeExtension
CAFreeCertTypeProperty
CACloseCertType
CAEnumCertTypes
CAFindCertTypeByName
CAAddCACertificateType
CASetCertTypeProperty
CACloseCA
CAFindByName
CACreateCertType
CAGetCertTypeFlags
CAGetCertTypeExtensions
CAGetCertTypeProperty
CASetCertTypeFlags
CAGetCertTypePropertyEx
CARemoveCACertificateType
CAGetCAProperty
msvcrt
wcscmp
wcsrchr
?terminate@@YAXXZ
_onexit
wcsstr
wcscat
_wcsupr
_wcsicmp
??3@YAXPAX@Z
mbstowcs
__dllonexit
??1type_info@@UAE@XZ
wcslen
vswprintf
wcstoul
free
memmove
wcschr
__RTDynamicCast
??2@YAPAXI@Z
malloc
_adjust_fdiv
_except_handler3
wcscpy
_initterm
advapi32
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryValueExW
RegDeleteKeyW
RegEnumKeyExW
comctl32
CreatePropertySheetPageW
PropertySheetW
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ