Static task
static1
Behavioral task
behavioral1
Sample
521eb1e8078cf65cdfcff26fc4a009fd_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
521eb1e8078cf65cdfcff26fc4a009fd_JaffaCakes118
-
Size
244KB
-
MD5
521eb1e8078cf65cdfcff26fc4a009fd
-
SHA1
26af2f33c8312a19efafde40af7f305ffb311d54
-
SHA256
a58794073784fdd2d849e0722469d94783395372ea2a8251e15169ee6f53a341
-
SHA512
71c3b882ea7aed9bf5dc00aa7787bed72b089ac6fb8ff02f14d79dc950c5e4938530d4e0d0d62c770f3783fc212d33022e02bb5e8bc4c6fc0a71be466b43a007
-
SSDEEP
6144:o/ZjbiNEazt6+s0Y8WFVPZbFBmSQuG9K7EOS:ohjONEo6+NY8OPZbLmSU9K7EOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 521eb1e8078cf65cdfcff26fc4a009fd_JaffaCakes118
Files
-
521eb1e8078cf65cdfcff26fc4a009fd_JaffaCakes118.exe windows:4 windows x86 arch:x86
01dd0a9c087895eb56392d4d1fd4d1f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameA
GetTempPathA
WideCharToMultiByte
CreateFileA
MultiByteToWideChar
GetDiskFreeSpaceA
GetWindowsDirectoryA
GetDriveTypeA
SetErrorMode
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateDirectoryA
MoveFileA
GetVersion
FindFirstFileA
FindClose
UnmapViewOfFile
GetSystemInfo
GetLastError
LoadLibraryA
GetProcAddress
OpenProcess
CloseHandle
FreeLibrary
FindNextFileA
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
GetTickCount
DeleteFileA
WaitForSingleObject
TerminateProcess
WritePrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
LoadResource
Sleep
FindResourceA
GetSystemDirectoryA
LockResource
SizeofResource
GetVersionExA
RemoveDirectoryA
InterlockedDecrement
SetFilePointer
SetEndOfFile
SetEnvironmentVariableW
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
FlushFileBuffers
SetEnvironmentVariableA
CompareStringW
CompareStringA
InterlockedIncrement
GetModuleFileNameA
HeapAlloc
GetTimeZoneInformation
GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringW
LCMapStringA
SetStdHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
DeleteCriticalSection
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
ReadFile
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapFree
HeapReAlloc
SetFileAttributesA
GetCPInfo
GetACP
GetOEMCP
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
MessageBoxA
LoadStringA
DialogBoxParamA
DialogBoxIndirectParamA
PostMessageA
DrawTextExA
LoadBitmapA
FillRect
GetSysColor
SendMessageA
GetSystemMetrics
GetClientRect
GetDlgItem
ReleaseDC
GetDC
EndDialog
SetDlgItemTextA
MoveWindow
GetWindowRect
ShowWindow
GetAsyncKeyState
SendDlgItemMessageA
UpdateWindow
InvalidateRect
IsWindow
CreateDialogParamA
DestroyWindow
SetWindowPos
GetParent
SystemParametersInfoA
CharPrevA
CharNextA
WaitForInputIdle
GetDesktopWindow
PeekMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
LoadIconA
GetSystemMenu
EnableMenuItem
advapi32
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
RegEnumKeyExA
RegSetValueA
RegQueryValueA
gdi32
DeleteDC
SetTextColor
SelectObject
CreateCompatibleDC
GetObjectA
DeleteObject
CreateSolidBrush
CreateFontIndirectA
GetCurrentObject
GetStockObject
SetBkColor
BitBlt
comctl32
ord17
Sections
.text Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE