Static task
static1
Behavioral task
behavioral1
Sample
413c3841a94fcd11d3708e305f50095a_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
413c3841a94fcd11d3708e305f50095a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
413c3841a94fcd11d3708e305f50095a_JaffaCakes118
-
Size
19KB
-
MD5
413c3841a94fcd11d3708e305f50095a
-
SHA1
7e98f671d126c9d09e57252feee3a6736604230a
-
SHA256
e81b43a0c86416ab01c4c08eac5812162f4c5f9faee2cbf30313b5111253417f
-
SHA512
fbab500597f6d960aca625cf533fbca01b27e92a78d32b9b40281531951dd35bea56d77affaa2a9151751404f6a82a33c80aa059ce1f2fb94f51a810c7707786
-
SSDEEP
384:TcjFeagW/LdF3YAYSAiIayRrRpiO1bH9h2/rqvO7QH:UFeGnLYDhF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 413c3841a94fcd11d3708e305f50095a_JaffaCakes118
Files
-
413c3841a94fcd11d3708e305f50095a_JaffaCakes118.exe windows:5 windows x86 arch:x86
0f237633a36d2a69d926d87002d2d143
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
CloseHandle
InterlockedCompareExchange
CreateThread
GetModuleFileNameA
CreateFileW
LeaveCriticalSection
FreeLibrary
GetProcessHeap
LeaveCriticalSection
HeapAlloc
lstrlenA
GetModuleHandleW
lstrcmpiW
Sleep
DisableThreadLibraryCalls
FreeLibrary
EnterCriticalSection
InterlockedCompareExchange
GetLastError
DisableThreadLibraryCalls
DisableThreadLibraryCalls
Sleep
GetTickCount
GetModuleHandleW
VirtualProtect
LocalAlloc
InterlockedCompareExchange
LoadLibraryW
EnterCriticalSection
VirtualAlloc
EnterCriticalSection
ReadFile
GetModuleHandleW
GetCurrentProcessId
GetProcAddress
HeapFree
VirtualAlloc
Sleep
CloseHandle
LoadLibraryW
HeapDestroy
EnterCriticalSection
lstrcmpiW
LocalAlloc
DisableThreadLibraryCalls
InterlockedDecrement
LocalFree
GetCurrentThreadId
LoadLibraryW
FreeLibrary
InterlockedExchange
MultiByteToWideChar
GetModuleHandleA
SetLastError
HeapDestroy
InitializeCriticalSection
GetModuleHandleW
GetSystemTimeAsFileTime
GetVersionExA
GetCurrentThreadId
Sleep
SetLastError
LeaveCriticalSection
DeleteCriticalSection
CreateThread
SetLastError
GetTickCount
EnterCriticalSection
GetLastError
CreateEventW
GetVersionExA
DeleteCriticalSection
lstrlenA
DisableThreadLibraryCalls
LeaveCriticalSection
MultiByteToWideChar
CreateEventW
VirtualProtect
GetCurrentThreadId
VirtualAlloc
EnterCriticalSection
VirtualProtect
HeapFree
GetModuleFileNameA
user32
PostMessageW
LoadCursorW
GetClientRect
DefWindowProcW
SetDlgItemTextW
PostMessageW
wsprintfA
DestroyWindow
IsWindow
EnableWindow
GetWindowRect
TranslateMessage
GetWindowRect
GetDlgItem
GetClientRect
GetDC
GetWindowLongW
GetDC
ShowWindow
GetSysColor
LoadCursorW
GetWindowRect
LoadCursorW
PeekMessageW
GetDlgItem
DialogBoxParamW
ReleaseDC
GetWindowLongW
SetWindowPos
GetDlgItem
EndPaint
EndPaint
SendDlgItemMessageW
PostQuitMessage
ReleaseDC
SetWindowLongW
LoadCursorW
PostQuitMessage
DestroyWindow
MessageBoxW
GetDesktopWindow
GetDlgItem
BeginPaint
BeginPaint
SetWindowPos
SendDlgItemMessageW
GetSystemMetrics
ReleaseDC
GetParent
SetDlgItemTextW
LoadStringW
TranslateMessage
EnableWindow
IsDlgButtonChecked
LoadStringW
MessageBoxW
ReleaseDC
IsWindow
KillTimer
GetParent
EnableWindow
MessageBoxW
TranslateMessage
PostMessageW
EndPaint
GetSysColor
SetForegroundWindow
PostQuitMessage
GetSystemMetrics
GetParent
SetWindowPos
EnableWindow
DispatchMessageW
SetTimer
ReleaseDC
PostMessageW
LoadStringW
EndDialog
SendMessageW
LoadCursorW
ReleaseDC
EndDialog
DestroyWindow
LoadStringW
LoadCursorW
Sections
.text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ