Static task
static1
Behavioral task
behavioral1
Sample
ec1fca0a12cb71cd852082fca86d75a3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ec1fca0a12cb71cd852082fca86d75a3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ec1fca0a12cb71cd852082fca86d75a3_JaffaCakes118
-
Size
163KB
-
MD5
ec1fca0a12cb71cd852082fca86d75a3
-
SHA1
d7c1b6371c3a9901315d9da6918d5903cd05bfcc
-
SHA256
791a4550b6592c20729d82c63dc93456b002474746d86269418a10f26ae567c9
-
SHA512
955e73c1281e05a734d5ff61f3e6f8a164c5160a6c3eddff14ff8a05c99437aa2d1be900ec6593bdb21b18635340ad412c57646edc7463110c17633c59a1292a
-
SSDEEP
3072:00FbfxKGEkt8dp30PUGrtts9zGbEI+EDdix7L/QQM79LE:nZxg1dp30PUe5GYwxPc9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec1fca0a12cb71cd852082fca86d75a3_JaffaCakes118
Files
-
ec1fca0a12cb71cd852082fca86d75a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
daab785c53431d80fbf578aee908f6bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerFindFileA
gdi32
SetTextColor
GetPaletteEntries
CreateCompatibleBitmap
CreateCompatibleDC
ole32
CoRevokeClassObject
CoUninitialize
CoGetObjectContext
comdlg32
GetFileTitleA
FindTextA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
user32
CharNextW
GetWindowLongA
IsZoomed
GetSystemMenu
GetClassLongA
IsWindow
GetScrollInfo
ClientToScreen
GetKeyboardType
IsChild
InsertMenuA
UnhookWindowsHookEx
EnumWindows
RegisterClipboardFormatA
SetFocus
GetClientRect
EnableWindow
OffsetRect
SetMenuItemInfoA
GetKeyNameTextA
GetKeyboardState
SendMessageA
GetMenuState
AdjustWindowRectEx
MapVirtualKeyA
SetWindowsHookExA
GetFocus
GetSysColorBrush
GetKeyboardLayoutList
LoadCursorA
IsIconic
CreateMenu
GetSystemMetrics
DefWindowProcA
DrawFrameControl
GetIconInfo
PostQuitMessage
MapWindowPoints
IsWindowUnicode
SetWindowPlacement
DestroyMenu
SetWindowTextA
SetActiveWindow
DrawAnimatedRects
GetMenuItemInfoA
EnumChildWindows
PeekMessageA
ShowScrollBar
DefMDIChildProcA
MessageBeep
InvalidateRect
TranslateMessage
DrawMenuBar
GetClassInfoA
CallWindowProcA
SetCapture
GetPropA
GetKeyboardLayoutNameA
KillTimer
RegisterClassA
SetScrollPos
UnregisterClassA
CreateIcon
WaitMessage
GetWindowTextA
RemovePropA
LoadBitmapA
GetMenu
GetDCEx
DestroyIcon
DrawIconEx
GetForegroundWindow
EnableScrollBar
IsRectEmpty
SetScrollInfo
GetKeyState
CheckMenuItem
PtInRect
GetSysColor
IsWindowVisible
FindWindowA
ShowOwnedPopups
MessageBoxA
PeekMessageW
SetMenu
IsDialogMessageA
GetMessagePos
EndPaint
DispatchMessageW
InsertMenuItemA
CharNextA
TrackPopupMenu
IsWindowEnabled
RegisterWindowMessageA
CharUpperBuffA
GetWindow
GetDlgItem
IsDialogMessageW
CloseClipboard
DestroyCursor
GetWindowPlacement
CreateWindowExA
EqualRect
ScreenToClient
GetDesktopWindow
GetWindowLongW
EmptyClipboard
IntersectRect
SetWindowLongA
DeleteMenu
GetKeyboardLayout
DrawIcon
WindowFromPoint
DispatchMessageA
GetClipboardData
SetForegroundWindow
PostMessageA
SetPropA
BeginPaint
SetWindowLongW
ReleaseDC
GetParent
CharLowerA
DefFrameProcA
SetWindowPos
RemoveMenu
RedrawWindow
GetTopWindow
GetMenuStringA
wsprintfA
OemToCharA
ScrollWindow
InflateRect
LoadKeyboardLayoutA
GetCursor
EnumThreadWindows
ReleaseCapture
GetWindowThreadProcessId
OpenClipboard
MoveWindow
TranslateMDISysAccel
SetTimer
GetMenuItemCount
ShowWindow
GetSubMenu
DrawTextA
GetWindowDC
LoadIconA
GetCursorPos
GetDC
EnableMenuItem
SetCursor
SetClassLongA
GetLastActivePopup
FrameRect
CharLowerBuffA
CharToOemA
SendMessageW
CallNextHookEx
ChildWindowFromPoint
GetScrollRange
SetRect
GetWindowRect
GetCapture
MsgWaitForMultipleObjects
GetMenuItemID
SetClipboardData
FillRect
GetClassNameA
GetScrollPos
DrawEdge
SetParent
DestroyWindow
UpdateWindow
ActivateKeyboardLayout
GetActiveWindow
SystemParametersInfoA
kernel32
SetThreadLocale
GlobalAddAtomA
GetProcAddress
LocalReAlloc
GetLastError
lstrcpyA
GetCurrentProcessId
GetOEMCP
VirtualAlloc
SizeofResource
ExitThread
LoadLibraryExA
CreateEventA
GetCommandLineA
GetModuleHandleA
WideCharToMultiByte
LoadLibraryA
shell32
SHGetDesktopFolder
SHGetFolderPathA
SHGetSpecialFolderLocation
Shell_NotifyIconA
advapi32
RegEnumValueA
RegEnumKeyA
Sections
CODE Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 130KB - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE