Static task
static1
Behavioral task
behavioral1
Sample
52cd7732c0e63719ddf3ff5eb7c83eaa_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
52cd7732c0e63719ddf3ff5eb7c83eaa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52cd7732c0e63719ddf3ff5eb7c83eaa_JaffaCakes118
-
Size
172KB
-
MD5
52cd7732c0e63719ddf3ff5eb7c83eaa
-
SHA1
f4fcaa283c9068c81eba77107f6769342e94b63f
-
SHA256
23de28ba0164d87dfa6476e33b77c66240448681eb2f0389e52e296a1fd9c971
-
SHA512
19500d0cfbf03c5fe9d7c81e7ce376abdc33f0c7973831107f50d3c239c8a8026ffa1fe518d1184aa9b6cfaa0cd4bad04625e2f161fea2f4e365ecd88972f7b9
-
SSDEEP
3072:l+VdyHEQCfx4GGrNxBoU2qx7tMA7VwB0G/4kdsu7IlQ+Aa7kp7MUXT8seg:lUyFCfWJxyUVx7txSsu7I8ay7M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52cd7732c0e63719ddf3ff5eb7c83eaa_JaffaCakes118
Files
-
52cd7732c0e63719ddf3ff5eb7c83eaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
240c33fea83948b28a757aa06df3d8e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetLocaleInfoA
ConnectNamedPipe
MoveFileExA
EndUpdateResourceA
OpenSemaphoreA
WriteConsoleOutputCharacterA
GetExitCodeProcess
lstrcpynA
GetProcessTimes
UnregisterWaitEx
lstrcpyA
MultiByteToWideChar
DeleteFileA
GetCurrencyFormatA
DisconnectNamedPipe
IsDebuggerPresent
GetDiskFreeSpaceA
CancelWaitableTimer
OpenFileMappingA
ReleaseMutex
GetVolumePathNameA
GetUserDefaultLangID
GetCommandLineA
GetModuleFileNameA
CreateSemaphoreA
ClearCommError
GetConsoleAliasExesLengthW
GlobalUnfix
GetFileSizeEx
GlobalHandle
GetDefaultCommConfigA
UnlockFile
ReadConsoleOutputCharacterA
EnumSystemLocalesA
CloseHandle
GetStringTypeExW
GetEnvironmentStringsA
SetFileShortNameA
ReadConsoleInputA
GetSystemWindowsDirectoryA
GetNamedPipeHandleStateA
OpenJobObjectA
AddConsoleAliasA
FindResourceExA
CreateWaitableTimerA
SetPriorityClass
SetConsoleCursorMode
WaitForMultipleObjects
GetConsoleOutputCP
GetPriorityClass
FindFirstFileExA
lstrlenA
GetComputerNameExA
DefineDosDeviceA
GetCommModemStatus
ExitProcess
WideCharToMultiByte
WaitNamedPipeA
OpenMutexA
LZCopy
SetEndOfFile
GetDiskFreeSpaceExA
GetDiskFreeSpaceExA
SetDllDirectoryA
SetupComm
lstrcmp
IsBadCodePtr
SetTimeZoneInformation
LocalReAlloc
UpdateResourceA
GetConsoleCommandHistoryLengthA
SetProcessPriorityBoost
GlobalFlags
CreateFileA
GetFileAttributesA
AddAtomA
TerminateThread
SetFileApisToANSI
ReadConsoleOutputCharacterA
WideCharToMultiByte
CreateDirectoryA
CloseHandle
FindNextVolumeMountPointA
VirtualAllocEx
GetConsoleInputExeNameA
GetComputerNameA
GetLogicalDriveStringsA
SetFilePointerEx
GetSystemTime
GetConsoleCursorInfo
GetProcAddress
winmm
timeGetSystemTime
user32
OemToCharA
GetAltTabInfoA
CharNextExA
LoadBitmapA
DialogBoxParamA
SubtractRect
InSendMessage
GetClassLongA
GetKeyboardLayoutNameA
AttachThreadInput
GetWindowWord
GetDlgCtrlID
TrackPopupMenuEx
DragDetect
DestroyCursor
MapDialogRect
InsertMenuItemA
PrintWindow
LoadIconA
GetWindowPlacement
CharToOemBuffA
GetNextDlgTabItem
SetFocus
GetSysColorBrush
DestroyWindow
EndDialog
MapDialogRect
CreateDesktopA
UnpackDDElParam
DestroyIcon
MapWindowPoints
GetMenuStringA
ShowWindowAsync
ChildWindowFromPoint
GetMenuCheckMarkDimensions
GetMenuItemCount
GetClassLongA
RegisterClassExW
SystemParametersInfoA
FindWindowA
ChangeMenuA
CreateWindowStationA
CopyAcceleratorTableA
GetMonitorInfoA
SystemParametersInfoA
ShowOwnedPopups
GetWindowTextA
ExcludeUpdateRgn
TileWindows
SendDlgItemMessageA
DialogBoxIndirectParamAorW
TileChildWindows
IsCharUpperA
IsCharUpperA
BroadcastSystemMessageExA
IsRectEmpty
AllowForegroundActivation
GetMessageExtraInfo
DlgDirListComboBoxA
BroadcastSystemMessageExA
PrivateExtractIconsA
PostQuitMessage
GetDoubleClickTime
GetWindowLongA
ScreenToClient
GetMenuDefaultItem
MessageBoxTimeoutA
GetMenuStringA
EnumWindowStationsA
ShowCaret
RegisterTasklist
DrawTextExW
GetMouseMovePointsEx
DrawIconEx
DlgDirSelectExA
TrackPopupMenuEx
GetUserObjectSecurity
QuerySendMessage
LockSetForegroundWindow
ReasonCodeNeedsComment
CreateSystemThreads
PostThreadMessageA
TranslateMessageEx
GetClassInfoA
Sections
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itext Size: 156KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ