Static task
static1
Behavioral task
behavioral1
Sample
5500ff8b2a170b00d8fcd48cb5e9f360_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5500ff8b2a170b00d8fcd48cb5e9f360_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5500ff8b2a170b00d8fcd48cb5e9f360_JaffaCakes118
-
Size
277KB
-
MD5
5500ff8b2a170b00d8fcd48cb5e9f360
-
SHA1
2b29a21c73fa09e0636e3f8ceb3f1d40939501d5
-
SHA256
7c938e3156f45b3a9a7fc3c675bd820f356d77e0a77f33504377b860d74a2d3e
-
SHA512
7a118773f737526a58a263429f685196c7f49b2200ccbe8044fc96af24ad3f95172859be4c26e950628cb695effeaed816ce8615659b5cf84445a787dd755cf4
-
SSDEEP
6144:ak1Fx8/b+of1Qa1Rr3Lf5906Mzk0bVzNv+SE84r:f1/8/b+of1V1tLfj06J0bV52So
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5500ff8b2a170b00d8fcd48cb5e9f360_JaffaCakes118
Files
-
5500ff8b2a170b00d8fcd48cb5e9f360_JaffaCakes118.exe windows:5 windows x86 arch:x86
e0cd632dab73eb13eb4b985ab7c37444
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
SetEndOfFile
GetStringTypeW
LCMapStringW
SetFilePointer
MultiByteToWideChar
WriteConsoleW
RaiseException
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
ReadFile
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
SetCurrentDirectoryW
GetStdHandle
LoadLibraryW
DeleteCriticalSection
RtlUnwind
GetCurrentDirectoryW
CreateFileW
CreateFileA
HeapReAlloc
HeapSize
FlushFileBuffers
CompareStringW
lstrcpyA
CloseHandle
HeapCreate
GetModuleHandleA
PeekNamedPipe
GetFileInformationByHandle
LoadLibraryA
GlobalFree
GetProcAddress
GetLastError
lstrcatA
Sleep
GlobalAlloc
GetCurrentProcess
HeapAlloc
GetFullPathNameW
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
lstrlenA
GetModuleFileNameW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileExW
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
SetEnvironmentVariableA
user32
MoveWindow
EndPaint
DestroyWindow
GetWindowRect
KillTimer
DrawTextA
GetSubMenu
GetFocus
wsprintfA
GetClientRect
SetFocus
SendMessageA
BeginPaint
EnumWindows
wsprintfW
LoadIconW
MessageBoxA
InvalidateRect
ChangeClipboardChain
GetDlgItem
DefWindowProcA
ShowWindow
CreateDialogParamW
DrawMenuBar
MessageBoxW
FindWindowA
LoadCursorA
SetWindowTextW
SetClipboardViewer
CheckMenuItem
gdi32
CreateFontIndirectA
DeleteObject
SelectObject
GetTextMetricsA
TextOutA
advapi32
RegCloseKey
RegOpenKeyExW
FreeSid
AllocateAndInitializeSid
OpenProcessToken
LookupAccountSidA
EqualSid
RegSetValueExA
shell32
Shell_NotifyIconA
SHGetFolderLocation
ShellExecuteW
SHGetFileInfoA
ws2_32
WSAStartup
comctl32
ord17
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 183KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ