Static task
static1
Behavioral task
behavioral1
Sample
52dd791f8f4da6271249dcefefc31c62_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
52dd791f8f4da6271249dcefefc31c62_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52dd791f8f4da6271249dcefefc31c62_JaffaCakes118
-
Size
348KB
-
MD5
52dd791f8f4da6271249dcefefc31c62
-
SHA1
53f5dec9410dec02a10a059f96214070ea7f8456
-
SHA256
e19194572d0df950b55c7ed83275d266310702121fede7ae84c8ffb1d9d3b1a7
-
SHA512
4a78f4397b1b507cc395346fa8ef29278921ad37bf08155829fb90c8a34a748318cce7a0728aeabaec254dd586dc136545891377a9d258847500b92a2e1dc9c2
-
SSDEEP
6144:gb6yavKlppcUmqV0rAL6x1JtaGLiQKsvjZ6QiyerBMNOQ1EIcaHda:g4v2pppinuQKsvj+yerKx15caHo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52dd791f8f4da6271249dcefefc31c62_JaffaCakes118
Files
-
52dd791f8f4da6271249dcefefc31c62_JaffaCakes118.exe windows:4 windows x86 arch:x86
0c330b24b73feda4126234d4ed31d57c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetFocus
UpdateWindow
ShowWindow
IsWindow
EnableWindow
TranslateMessage
GetSysColor
GetDC
DestroyWindow
SetCursor
ClientToScreen
CreateWindowExA
SetForegroundWindow
DestroyMenu
kernel32
GetACP
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LCMapStringW
GetStringTypeW
SetConsoleCtrlHandler
IsBadWritePtr
VirtualAlloc
LeaveCriticalSection
SetLastError
GetProcAddress
GetVersion
SetEndOfFile
GetFileType
Sleep
TlsGetValue
GetEnvironmentStringsW
GlobalAlloc
LoadResource
GetEnvironmentVariableA
TlsFree
SetEnvironmentVariableA
GetCurrentThreadId
HeapReAlloc
GetSystemDirectoryA
GetSystemTimeAsFileTime
CloseHandle
WriteFile
SetUnhandledExceptionFilter
ReadFile
GetModuleHandleA
WideCharToMultiByte
GetStringTypeA
GlobalLock
GetCommandLineA
GetCPInfo
MultiByteToWideChar
UnhandledExceptionFilter
GetWindowsDirectoryA
GetCurrentProcessId
GetEnvironmentStrings
GetStartupInfoA
GetModuleFileNameA
LoadLibraryA
GetVersionExA
GlobalUnlock
TlsAlloc
ExitProcess
HeapDestroy
LCMapStringA
WaitForSingleObject
DuplicateHandle
lstrlenA
HeapCreate
HeapFree
GetTickCount
GetCurrentThread
GetLastError
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
SetHandleCount
GetStdHandle
DeleteCriticalSection
TlsSetValue
VirtualFree
RtlUnwind
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
FatalAppExitA
GetOEMCP
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE