Static task
static1
Behavioral task
behavioral1
Sample
f127853669e968e0de6bbffa03342322_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f127853669e968e0de6bbffa03342322_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f127853669e968e0de6bbffa03342322_JaffaCakes118
-
Size
122KB
-
MD5
f127853669e968e0de6bbffa03342322
-
SHA1
f1647cbd9bea1b039bb3ae42bcce307d1597ab92
-
SHA256
cb7545725d4defe04210d2a0242885252ada55ca82e7099b3215e97669aa49ba
-
SHA512
70f0902856b09badf2a51b4bd1a64ca792d847d8239f5ad89c94a1b4bde0a11501a06625b34f081834181e4b3c0dbe68a98ab90375786202c3c3185d6c3f24b3
-
SSDEEP
1536:MCvcGuOt+/SmgkOxdSH4aqNAgOiutlftwn3k6nmezWZJC2eKC4ILMNSrS8:MCvcY+/rgjSppDJw3k6n/CC9LYSm8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f127853669e968e0de6bbffa03342322_JaffaCakes118
Files
-
f127853669e968e0de6bbffa03342322_JaffaCakes118.exe windows:4 windows x86 arch:x86
70a093ceec1390e9befffc9e8288f60b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysFreeString
user32
ScreenToClient
GetMenuState
EnableScrollBar
TranslateMessage
DestroyCursor
DrawIconEx
CreatePopupMenu
ShowScrollBar
EnumChildWindows
IsIconic
GetActiveWindow
GetMenu
MapVirtualKeyA
GetIconInfo
RegisterWindowMessageA
GetKeyboardLayout
MessageBoxA
GetPropA
RemovePropA
EmptyClipboard
IsWindowUnicode
OpenClipboard
FindWindowA
DrawTextA
PeekMessageW
wsprintfA
TranslateMDISysAccel
CharNextA
CharNextW
GetSystemMetrics
DefMDIChildProcA
IsWindowVisible
WaitMessage
RedrawWindow
GetWindow
SetMenu
DrawAnimatedRects
SetFocus
MoveWindow
CreateWindowExA
GetCursor
GetScrollRange
GetKeyboardLayoutList
GetScrollPos
PtInRect
InsertMenuA
EnableWindow
GetSysColor
SetParent
ReleaseCapture
GetKeyboardState
RegisterClassA
CharLowerBuffA
GetClassNameA
LoadBitmapA
GetCursorPos
MessageBeep
ShowOwnedPopups
SetTimer
DestroyWindow
CharUpperBuffA
InflateRect
GetWindowLongW
DrawMenuBar
SetScrollInfo
ActivateKeyboardLayout
IsRectEmpty
SendMessageA
WindowFromPoint
GetWindowTextA
GetParent
ChildWindowFromPoint
SetScrollPos
SetWindowPos
SetWindowTextA
SetActiveWindow
GetKeyNameTextA
SetWindowLongW
DeleteMenu
PostMessageA
SetCapture
TrackPopupMenu
FillRect
SendMessageW
SetWindowLongA
IsZoomed
GetClassInfoA
CloseClipboard
GetDesktopWindow
DispatchMessageW
IsWindowEnabled
IsDialogMessageW
GetLastActivePopup
LoadStringA
GetMenuItemCount
IsChild
GetKeyState
GetMenuStringA
SystemParametersInfoA
CharToOemA
GetTopWindow
GetMenuItemInfoA
GetWindowRect
GetSystemMenu
CreateIcon
ScrollWindow
SetClassLongA
SetWindowPlacement
GetScrollInfo
GetFocus
UnhookWindowsHookEx
UnregisterClassA
KillTimer
EqualRect
LoadIconA
CreateMenu
GetForegroundWindow
PeekMessageA
GetSubMenu
DestroyMenu
CheckMenuItem
GetDlgItem
GetWindowDC
SetScrollRange
DestroyIcon
SetCursor
PostQuitMessage
ReleaseDC
DrawEdge
LoadKeyboardLayoutA
GetMenuItemID
LoadCursorA
CharLowerA
EnumWindows
GetWindowThreadProcessId
GetClipboardData
CallWindowProcA
GetDC
RegisterClipboardFormatA
MapWindowPoints
DrawFrameControl
ClientToScreen
GetMessagePos
CallNextHookEx
IsDialogMessageA
InvalidateRect
IsWindow
EnumThreadWindows
OemToCharA
EnableMenuItem
SetForegroundWindow
GetSysColorBrush
MsgWaitForMultipleObjects
DefFrameProcA
DrawIcon
DispatchMessageA
GetKeyboardType
ShowWindow
OffsetRect
IntersectRect
FrameRect
GetKeyboardLayoutNameA
RemoveMenu
SetPropA
GetWindowLongA
GetClientRect
BeginPaint
GetWindowPlacement
SetWindowsHookExA
AdjustWindowRectEx
UpdateWindow
GetClassLongA
GetDCEx
GetCapture
SetMenuItemInfoA
DefWindowProcA
EndPaint
SetClipboardData
comdlg32
FindTextA
ChooseColorA
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
version
GetFileVersionInfoA
VerFindFileA
advapi32
RegQueryInfoKeyA
RegEnumKeyA
RegOpenKeyA
shell32
SHGetDiskFreeSpaceA
gdi32
GetDIBits
GetCurrentPositionEx
GetClipBox
SelectPalette
GetObjectA
kernel32
FindFirstFileA
LocalAlloc
GetLastError
GlobalFindAtomA
MulDiv
ExitProcess
VirtualAllocEx
GetModuleHandleA
GetProcAddress
GetOEMCP
GlobalAddAtomA
CreateFileA
LoadLibraryA
VirtualAlloc
HeapDestroy
VirtualQuery
Sections
CODE Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 877B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ