Static task
static1
Behavioral task
behavioral1
Sample
14a9571c14efcf3b1819f738cc66a41c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14a9571c14efcf3b1819f738cc66a41c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
14a9571c14efcf3b1819f738cc66a41c_JaffaCakes118
-
Size
332KB
-
MD5
14a9571c14efcf3b1819f738cc66a41c
-
SHA1
84ff45cddccf0e8e5dc45744547639cf16785109
-
SHA256
a4c1145c0153c46d3dc509d571c7c75bab37bc44801af25a76850f32e2b7c003
-
SHA512
144116d1a65e36b2f12bd69c16945c8b83754393bda70eb05b91ac652b4020e30d85aa4eb55f8dc417392266d233089338445dacf379f4520dab64350a254af6
-
SSDEEP
6144:SWIKmrCnb+Zmucw8H9ZioqfZsZgZj+3aHOKEpTnh5QthjwXMFhK1V9gTmR1orV/:ArCn6w0SBZgFZHOKErit1wcFh4g41o5/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a9571c14efcf3b1819f738cc66a41c_JaffaCakes118
Files
-
14a9571c14efcf3b1819f738cc66a41c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4c8b5592c13362586b52a28c4b6d0ff0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysFreeString
SysAllocString
VariantInit
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegCreateKeyExW
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
user32
IsWindow
EndPaint
PeekMessageA
GetDC
ReleaseDC
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
SetWindowPos
TranslateMessage
IsIconic
GetSubMenu
SetTimer
FillRect
BeginPaint
PostQuitMessage
GetSystemMetrics
SetWindowLongA
EndDialog
CreateWindowExA
GetDlgItem
ClientToScreen
LoadCursorA
SendMessageA
MoveWindow
MessageBoxA
GetSysColor
GetKeyState
DrawTextA
GetFocus
InvalidateRect
wsprintfA
GetClientRect
SetCursor
DestroyMenu
SetForegroundWindow
KillTimer
kernel32
InitializeCriticalSection
LockResource
CompareStringA
LoadResource
FindClose
InterlockedDecrement
FormatMessageA
GetCurrentThread
SetLastError
GetEnvironmentVariableA
GetModuleFileNameW
IsDebuggerPresent
ExitProcess
FlushFileBuffers
GetModuleFileNameA
UnhandledExceptionFilter
LoadLibraryExW
MultiByteToWideChar
GetModuleHandleA
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
FileTimeToSystemTime
GetFileAttributesA
WaitForSingleObject
GetDriveTypeA
HeapDestroy
GetFileAttributesW
GetLocalTime
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
lstrcatA
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetFileAttributesA
GetExitCodeProcess
GetOEMCP
VirtualAlloc
SetConsoleCtrlHandler
Sleep
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindResourceW
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
SetStdHandle
GetLastError
InterlockedIncrement
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventW
RemoveDirectoryA
FindNextFileA
CreateFileMappingA
CreateThread
GetCurrentThreadId
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
SetEvent
CreateDirectoryA
LCMapStringW
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetVersion
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
LocalFree
msvcrt
_cexit
free
_exit
exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_strcmpi
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ