Static task
static1
Behavioral task
behavioral1
Sample
1370559336a698d1f24ad2a5536cf364_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
1370559336a698d1f24ad2a5536cf364_JaffaCakes118
-
Size
180KB
-
MD5
1370559336a698d1f24ad2a5536cf364
-
SHA1
33999d69484ce48c030a35aa5b22922a1ac33718
-
SHA256
1ee9579824b8ef5d9b637c3f5e17fe23ea6ae1b89631b75da83c838b04105190
-
SHA512
82f10365b936666ebcd0e69a6033103c092b7a4814a8bff1919debbb9bd5128d828a532645ec2b0c2e85fffcef3d987eccf6105616ec871b56ee1aecc8e809ae
-
SSDEEP
1536:A4KU+8uOZdegVb+sUmgj7lnb+oXMfGfHan89lG:ABU+8/ZFisUhjxn2fGf6D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1370559336a698d1f24ad2a5536cf364_JaffaCakes118
Files
-
1370559336a698d1f24ad2a5536cf364_JaffaCakes118.exe windows:5 windows x86 arch:x86
e71b95bf4c1d587ebe5aa7be482e7552
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
SetEvent
ExpandEnvironmentStringsW
lstrcmpiW
HeapReAlloc
CloseHandle
GetOEMCP
GetCurrentThreadId
VirtualAlloc
FindResourceA
LoadLibraryW
LocalAlloc
IsValidCodePage
GetCurrentProcess
ExitProcess
HeapAlloc
CreateEventW
GetDriveTypeA
RaiseException
GetVersion
LCMapStringW
IsDebuggerPresent
GetModuleHandleA
DeviceIoControl
GetThreadLocale
msvcrt
wcsncpy
_purecall
_controlfp
wcsncmp
_ftol
fprintf
strtoul
__p__iob
_rotl
ctime
_wcslwr
srand
rand
_ultoa
__set_app_type
malloc
_finite
fclose
_snwprintf
_rotr
_wcsnicmp
__initenv
_stat
_CIpow
_lock
_local_unwind2
printf
atoi
_wfopen
swprintf
_ltoa
strchr
__p__fmode
sscanf
wcsrchr
qsort
__p__osver
user32
GetDlgCtrlID
CharNextA
IsChild
SendMessageW
OffsetRect
GetMenu
DefWindowProcW
GetDC
GetClassNameW
GetMessageW
GetWindowRect
IsDlgButtonChecked
IntersectRect
GetWindowLongW
GetMenuItemCount
FindWindowW
BeginPaint
GetCapture
SetWindowLongA
RegisterClassExW
MoveWindow
EnableWindow
GetSysColorBrush
GetWindowTextW
SystemParametersInfoW
ScreenToClient
SetDlgItemTextW
GetActiveWindow
GetDlgItem
GetProcessWindowStation
CreateWindowExW
GetClassNameA
SetCursor
ole32
GetHGlobalFromStream
OleRun
CoReleaseMarshalData
CreateOleAdviseHolder
CLSIDFromString
CoInitializeSecurity
CoDisconnectObject
CoFreeUnusedLibraries
CoGetObjectContext
CreateBindCtx
CoInitializeEx
OleRegGetUserType
CoTaskMemRealloc
CoSetProxyBlanket
CoRevertToSelf
CoRevokeClassObject
CoCreateInstance
CoInitialize
OleCreateStaticFromData
CoGetClassObject
OleSaveToStream
PropVariantCopy
CreateStreamOnHGlobal
StgOpenStorage
PropVariantClear
CoImpersonateClient
CreateDataAdviseHolder
CoRegisterClassObject
CreateILockBytesOnHGlobal
OleUninitialize
CoTaskMemFree
comdlg32
GetOpenFileNameW
GetFileTitleW
GetFileTitleA
GetSaveFileNameW
PrintDlgA
ChooseColorA
GetOpenFileNameA
PageSetupDlgA
ChooseFontW
PrintDlgExW
FindTextW
ChooseFontA
GetSaveFileNameA
ChooseColorW
CommDlgExtendedError
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 71KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 68KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE