Static task
static1
Behavioral task
behavioral1
Sample
ece7abc515ceacc284561f04bdd09fe3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ece7abc515ceacc284561f04bdd09fe3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ece7abc515ceacc284561f04bdd09fe3_JaffaCakes118
-
Size
97KB
-
MD5
ece7abc515ceacc284561f04bdd09fe3
-
SHA1
f41b54c63c79d2a58d004e7eb3b93bfba3b5316d
-
SHA256
7bf22157a5f6b540c25734bdcdb9b8e144bdbf593e1a1476d89737c72d0ebd45
-
SHA512
82487eeb3068585f195f8352d3c7772be20fde45884fbbbcb1b00aa784d16a4f34e8ca8f59902af7531953db88c5bc648590b8ca0326bdc84ed5b2ddeab7cdfb
-
SSDEEP
1536:+B6h0EWUSH+hH4EeXHEHhROgek5npbdBHHUvrB34w+szKoLjkNQ1AFVxD7yjmo+q:j0EWjkm3EBFecnXBmUsz3s+A9D7y7+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ece7abc515ceacc284561f04bdd09fe3_JaffaCakes118
Files
-
ece7abc515ceacc284561f04bdd09fe3_JaffaCakes118.exe windows:4 windows x86 arch:x86
1786fe491675543c8033375934cc347a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
user32
GetKeyState
GetWindow
SetWindowPos
EndDeferWindowPos
DefMDIChildProcA
EnumChildWindows
GetDesktopWindow
GetMenu
CallWindowProcA
CreateIcon
CharToOemA
RegisterClassA
EnableScrollBar
GetCursor
ShowScrollBar
SystemParametersInfoA
IsWindowEnabled
GetScrollRange
DeferWindowPos
GetMessagePos
DefWindowProcA
DrawFrameControl
ShowWindow
EnableWindow
DrawEdge
GetClipboardData
CreateWindowExA
CharLowerBuffA
TrackPopupMenu
GetSysColor
DispatchMessageW
CreatePopupMenu
FrameRect
GetMenuState
GetMenuItemCount
CallNextHookEx
GetLastActivePopup
GetIconInfo
DefFrameProcA
CreateMenu
IsWindowVisible
HideCaret
GetSubMenu
MessageBoxA
DrawIcon
GetMenuItemInfoA
DrawIconEx
GetDC
DrawMenuBar
CheckMenuItem
CharNextA
SetWindowTextA
GetParent
EqualRect
GetDCEx
GetCursorPos
FillRect
GetForegroundWindow
SetCursor
GetScrollInfo
GetWindowTextA
GetClientRect
EndPaint
GetMenuItemID
IsDialogMessageA
IsMenu
SetWindowLongA
EnumThreadWindows
IsChild
GetKeyNameTextA
BeginDeferWindowPos
GetScrollPos
GetClassInfoA
GetActiveWindow
GetPropA
DrawTextA
EnableMenuItem
GetCapture
GetClassLongA
ClientToScreen
FindWindowA
DispatchMessageA
BeginPaint
SetTimer
EnumWindows
GetFocus
comctl32
ImageList_Create
msvcrt
atol
calloc
memset
clock
wcschr
_acmdln
memmove
wcstol
rand
tolower
exit
sqrt
mbstowcs
wcsncmp
sprintf
time
memcpy
srand
malloc
wcscspn
swprintf
kernel32
GetCommandLineA
GetDateFormatA
EnumCalendarInfoA
CreateThread
DeleteFileA
SetThreadLocale
lstrcmpA
GetLocalTime
MoveFileExA
GetLastError
GlobalAddAtomA
GetACP
FreeLibrary
LockResource
GetCurrentThread
GetModuleHandleA
GetModuleFileNameA
Sleep
SetHandleCount
SetFilePointer
GetVersion
ExitThread
VirtualQuery
SetEvent
WaitForSingleObject
GetLocaleInfoA
FindFirstFileA
lstrlenA
SetEndOfFile
GetStdHandle
LoadLibraryA
VirtualFree
GetFullPathNameA
FindResourceA
InitializeCriticalSection
lstrcatA
GlobalAlloc
GetVersionExA
GetDiskFreeSpaceA
GetUserDefaultLCID
LocalReAlloc
SizeofResource
VirtualAllocEx
Sections
INIT Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 512B - Virtual size: 243B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 571B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ