Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_0b56203e5b9f4bbf074bece56561a0de.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_0b56203e5b9f4bbf074bece56561a0de
-
Size
158KB
-
MD5
0b56203e5b9f4bbf074bece56561a0de
-
SHA1
4f95aaaabbf10fe773e94eef90bb2bcfa25d6dce
-
SHA256
120bf6ceaf5c1dc05cc55a24129a1995d08eb39c280faf80bc369c64fb10555f
-
SHA512
7639ddd88a0ba3a096551a011a7a2b6ab498e9fc7312b110ab87b14c6c745213332be28f184c4dbd8c3b52a0cccc7351dfda5b892852de047c9c2dc0e4406b31
-
SSDEEP
1536:QxGxA43zk0FXotMlexqMEIgoKToh8EEtv/+n+kzUza618WoQGSRqx:a43R9oiljIgoKT0REp2+kQu61Htbqx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_0b56203e5b9f4bbf074bece56561a0de
Files
-
JaffaCakes118_0b56203e5b9f4bbf074bece56561a0de.exe windows:4 windows x86 arch:x86
6f84c97d71ba32ae483b6836ee43acc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClientRect
DrawTextA
BeginPaint
CharNextA
SendDlgItemMessageA
SetClassLongA
GetParent
CreateDialogParamA
GetDlgItem
LoadCursorA
LoadBitmapA
PostQuitMessage
SetDlgItemTextA
EndDialog
EnableWindow
ScreenToClient
IsWindowVisible
FillRect
GetWindowRect
LoadIconA
GetDlgItemTextA
GetWindowTextA
CharPrevA
DestroyWindow
SetRect
RegisterClassA
SetWindowPos
SystemParametersInfoA
GetDesktopWindow
EndPaint
kernel32
CreateMutexA
SetThreadPriorityBoost
lstrlenA
GetModuleHandleExW
Sleep
GetLocalTime
GetLocaleInfoA
HeapFree
GetFileType
GetProcAddress
CreateFileA
InitializeCriticalSection
LocalUnlock
GetUserDefaultLCID
GetStringTypeW
GetTimeZoneInformation
SetEnvironmentVariableA
GetModuleHandleA
GetConsoleScreenBufferInfo
FileTimeToSystemTime
SetConsoleMode
GetVolumeInformationA
GetFullPathNameA
LeaveCriticalSection
WideCharToMultiByte
SetHandleCount
GetStdHandle
SetConsoleCtrlHandler
IsValidLocale
InterlockedExchange
GetStringTypeA
FindVolumeClose
GetProcessHeap
HeapCreate
EnumSystemLocalesA
GetSystemTime
FileTimeToLocalFileTime
GetUserDefaultUILanguage
GetEnvironmentVariableA
FindNextFileA
CompareStringW
SetStdHandle
GetCurrentProcess
GetFileTime
LCMapStringW
IsValidCodePage
LoadLibraryA
GetConsoleInputWaitHandle
GetModuleFileNameA
GetStartupInfoA
ExitProcess
HeapAlloc
WaitForSingleObject
GetConsoleMode
GetShortPathNameA
GetFileAttributesA
ReleaseMutex
FlushFileBuffers
GetVersionExA
GetDriveTypeA
FindClose
HeapDestroy
CompareStringA
SetVolumeLabelA
FindFirstFileA
GetLocaleInfoW
lstrcmpiA
LCMapStringA
GetDriveTypeA
VirtualAlloc
lstrcpynA
VirtualFree
shlwapi
wnsprintfW
wnsprintfA
wvnsprintfA
UrlGetPartA
AssocQueryStringW
gdi32
CreateRectRgn
SetBkColor
OffsetClipRgn
IntersectClipRect
GetStockObject
GetClipRgn
SelectObject
CreatePen
GetNearestColor
SetTextColor
shell32
ShellExecuteExA
ExtractIconExA
SHGetSpecialFolderPathW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
urlmon
CreateURLMoniker
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 106KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kfgaiog Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
orutfqe Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xwjacch Size: - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE