Static task
static1
Behavioral task
behavioral1
Sample
53cb8b51648b072eba5061a86fbfe3da_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53cb8b51648b072eba5061a86fbfe3da_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
53cb8b51648b072eba5061a86fbfe3da_JaffaCakes118
-
Size
456KB
-
MD5
53cb8b51648b072eba5061a86fbfe3da
-
SHA1
1ed16c7b6e8eb9647dc596dfce6d735d81453726
-
SHA256
02e3ac5db6ca68f6a62abb57d76fc597890ff4f9a51eb7e9e88fa29ef5eaf967
-
SHA512
9e47f62cecf5c9c9b0645864536c33e015976342d3b0e573eae6208f21ae23d3910c4a95024d09138b8928510c966dff2a204108bff315cbe91d4613b7eb9b5f
-
SSDEEP
12288:XmqGW3r2KIsLxWzqKt1X2hCGKOmMh5H6XvqmmPWpoLp:5e91X4CjO7H+vwZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53cb8b51648b072eba5061a86fbfe3da_JaffaCakes118
Files
-
53cb8b51648b072eba5061a86fbfe3da_JaffaCakes118.exe windows:4 windows x86 arch:x86
8cc317a784fd570f47ce55bb8dd6c31c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatA
InitializeCriticalSectionAndSpinCount
WriteFile
RaiseException
GetProcAddress
IsBadReadPtr
HeapReAlloc
SetEnvironmentVariableA
GetCPInfo
GetStringTypeA
GetCurrentProcessId
SetHandleCount
EnterCriticalSection
GetLocaleInfoA
SetLastError
TlsFree
IsDebuggerPresent
FileTimeToDosDateTime
SetStdHandle
TlsGetValue
lstrlenA
Sleep
GetConsoleCP
HeapCreate
IsValidLocale
DeleteCriticalSection
GetStartupInfoW
CreateFileA
WriteConsoleW
ExitProcess
GetTickCount
CompareStringW
SetFilePointer
HeapFree
GetDateFormatA
GetModuleFileNameA
GetTimeZoneInformation
LoadLibraryA
QueryPerformanceCounter
GetCurrentThread
VirtualAlloc
GetProfileSectionA
GetCommandLineW
TlsAlloc
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
VirtualFree
GetEnvironmentStringsW
GetLocaleInfoW
GetProcessHeap
MultiByteToWideChar
SetUnhandledExceptionFilter
InterlockedDecrement
GetConsoleMode
GetSystemTimeAsFileTime
GetFileType
FreeEnvironmentStringsW
CompareStringA
GetLastError
GetModuleFileNameW
FlushFileBuffers
OutputDebugStringW
LCMapStringA
UnhandledExceptionFilter
EnumSystemLocalesA
GetOEMCP
OutputDebugStringA
WideCharToMultiByte
HeapValidate
SetConsoleCtrlHandler
GetStartupInfoA
ReadConsoleOutputA
InterlockedExchange
GetStringTypeW
TlsSetValue
GetConsoleOutputCP
LCMapStringW
GetACP
FreeLibrary
IsValidCodePage
HeapSize
HeapAlloc
LoadLibraryW
CloseHandle
GetSystemTime
HeapDestroy
VirtualQuery
GetModuleHandleA
LeaveCriticalSection
GetStdHandle
GetUserDefaultLCID
RtlUnwind
DebugBreak
WriteConsoleA
ExitThread
InterlockedIncrement
GetModuleHandleW
user32
GetWindowTextW
GetDlgItemTextW
GetGuiResources
GetMenuContextHelpId
CharPrevA
GetClassLongA
LoadImageW
CreateWindowExA
CreateAcceleratorTableW
GetMenuItemInfoW
LoadKeyboardLayoutA
DialogBoxIndirectParamW
ScrollWindow
CharLowerBuffW
FindWindowW
GetClipboardData
GetDlgItemInt
CreateIconFromResource
ChangeDisplaySettingsExW
InsertMenuItemA
PostThreadMessageA
LoadIconW
Sections
.text Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ