dews
Static task
static1
Behavioral task
behavioral1
Sample
70cd7dac03e7262761d58616232b837a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70cd7dac03e7262761d58616232b837a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
70cd7dac03e7262761d58616232b837a_JaffaCakes118
-
Size
11.1MB
-
MD5
70cd7dac03e7262761d58616232b837a
-
SHA1
a93e9fea183cfef7f282f6c9744512433c58c228
-
SHA256
e827537be7f9f2851398a94c202be0d1360ac147833fea726f66a7361517fe24
-
SHA512
984e84d757299678bfa013c96526f0439d01f5506e5c63f5566f17ff54cc0d123df249ada2c95bb3ac2204a4991716fd5f614d27dc1ff12b946433080fb340ec
-
SSDEEP
3072:7rLSAaIXFM9X/WWIyOEfEDQMZWecFKmZ:PNWktyH9V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70cd7dac03e7262761d58616232b837a_JaffaCakes118
Files
-
70cd7dac03e7262761d58616232b837a_JaffaCakes118.exe windows:5 windows x86 arch:x86
e4c612f96489c3047672d0aa01e8ee66
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
lstrlenW
LoadLibraryA
OpenWaitableTimerW
GetSystemDirectoryA
GetVersionExW
Sleep
FindFirstFileW
GetTickCount
OpenFileMappingW
DeleteFileA
GetModuleHandleW
CompareStringA
CreateSemaphoreW
CreateMutexW
GetProcAddress
GetFileSize
CreateEventA
GetSystemDirectoryW
CreateFileA
SetLocalTime
GetDateFormatW
FindResourceA
LoadLibraryW
GetCommandLineA
user32
GetClassLongA
PostMessageW
DialogBoxParamA
wsprintfA
CreateDesktopW
DrawStateA
GetDlgItemTextA
IsCharLowerA
MessageBoxW
DispatchMessageA
LoadBitmapW
ctl3d32
Ctl3dGetVer
Ctl3dCtlColor
Ctl3dRegister
Ctl3dEnabled
shlwapi
UrlCompareW
PathCommonPrefixA
UrlGetPartW
PathIsURLA
PathCombineA
UrlCanonicalizeW
UrlUnescapeA
PathIsRootW
UrlGetLocationW
UrlEscapeA
UrlCreateFromPathA
Exports
Exports
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 708B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11.0MB - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ