Static task
static1
Behavioral task
behavioral1
Sample
52f86719e45e055f7321bc484110d20a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
52f86719e45e055f7321bc484110d20a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
52f86719e45e055f7321bc484110d20a_JaffaCakes118
-
Size
164KB
-
MD5
52f86719e45e055f7321bc484110d20a
-
SHA1
3237654e9a44d1526732a3cca009d97902ad6648
-
SHA256
b9a4c9d14a3077873aedead398fc05ebd180ee2e3a146581840b7d2ee62aee07
-
SHA512
c1182b570cec4262fb1f625676e5bd70f92885841367fa2fa574dac3f639b2e1e24872534b50d54d806999411e2b85497a7d4cf73507e55e03f9d9fe8c950f57
-
SSDEEP
3072:GdEu1dTduBqdv7yqPEMBSfzfMX15XUlmyGIGFUZ9iPgA3mt:0Bd4wdv79JSfzfMX1W/Gjxgl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 52f86719e45e055f7321bc484110d20a_JaffaCakes118
Files
-
52f86719e45e055f7321bc484110d20a_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c8cb881f6ed2b288c40f071e64b6a50
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateProcessW
DeleteFileW
Sleep
GetTickCount
GetSystemDirectoryW
CreateEventA
GlobalMemoryStatus
LeaveCriticalSection
FileTimeToSystemTime
HeapWalk
HeapCompact
HeapAlloc
HeapCreate
HeapFree
CopyFileW
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualProtect
VirtualAlloc
GetFileAttributesW
SetFileAttributesA
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
MoveFileW
user32
SetMenuItemInfoA
LoadIconA
GetSysColor
LockWindowUpdate
CreateWindowExW
CallWindowProcA
IsWindow
SetScrollInfo
GetScrollInfo
MessageBoxA
GetMessagePos
UpdateWindow
FindWindowA
GetKeyNameTextA
EnumChildWindows
SetWindowPos
GetWindowTextW
GetMessageA
DrawIcon
LoadIconW
ReleaseCapture
LoadImageA
MapDialogRect
SetDlgItemInt
ClientToScreen
FrameRect
ShowScrollBar
GetDlgItemInt
GetWindowTextLengthW
msvcr71
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
_cexit
_controlfp
_XcptFilter
_exit
_c_exit
malloc
free
exit
fopen
fseek
fread
fclose
strncmp
time
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ