?SendPointerW@@YGIPAKGPAHF<V
Static task
static1
Behavioral task
behavioral1
Sample
f2f8bb7a2f0403bde6b7cb93224a2b51_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2f8bb7a2f0403bde6b7cb93224a2b51_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2f8bb7a2f0403bde6b7cb93224a2b51_JaffaCakes118
-
Size
209KB
-
MD5
f2f8bb7a2f0403bde6b7cb93224a2b51
-
SHA1
3b22d749ffb7287720ed84fc7f53e27604a8d249
-
SHA256
9e1e1e8f9d55e081d5b62de6a800ec97e2639a2c6b9aeef2a0283db23f861b44
-
SHA512
0b9630268de8fa85c30ce9c1ba074e5cecebc6eeb8f9bf3f722ebf026b8a6f87c135297d78c291faf4d3ab4299e4ba16fe8a330f11b0042b2e0a69f91b10a7fc
-
SSDEEP
3072:OaA9B49NE+V6t7hlAAxLaPqnsV5CVi7UIUtZfnHUfaF2tbHB/mvgRJlI6Cio2amT:OXYNE8Crq9VW2Gfn8aktL88Y6CioHm7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f2f8bb7a2f0403bde6b7cb93224a2b51_JaffaCakes118
Files
-
f2f8bb7a2f0403bde6b7cb93224a2b51_JaffaCakes118.exe windows:5 windows x86 arch:x86
28dd953707a1626966280326de070f96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
TextOutW
DeleteDC
EndPath
EnumFontsW
GetDIBits
SelectObject
CreateBitmapIndirect
EndDoc
CombineRgn
CreateFontW
ExtTextOutA
ExtTextOutW
SetMapMode
GetSystemPaletteEntries
CreateRectRgn
CreateICW
CreateDIBitmap
GetCurrentObject
CreateFontIndirectA
SetWindowOrgEx
SetBkColor
CreateDIBSection
WidenPath
SetDIBColorTable
GetTextCharsetInfo
PatBlt
PtInRegion
TextOutA
RemoveFontResourceW
CreateSolidBrush
SetLayout
SetBrushOrgEx
PolyBezier
GetBitmapBits
RectInRegion
BeginPath
CreateDiscardableBitmap
OffsetViewportOrgEx
GetNearestPaletteIndex
AddFontResourceW
Ellipse
StartPage
CreateHatchBrush
CreatePatternBrush
SetBitmapDimensionEx
GetClipBox
SelectClipRgn
user32
SendMessageTimeoutA
CreateDialogParamW
VkKeyScanW
GetDlgItemInt
DefWindowProcW
DrawStateA
LoadIconA
CopyAcceleratorTableW
RegisterWindowMessageW
GetDlgItemTextA
IsRectEmpty
GetMenuItemInfoW
OffsetRect
DestroyAcceleratorTable
PeekMessageA
GetSysColor
RegisterWindowMessageA
ShowCursor
DrawTextA
DrawEdge
AttachThreadInput
FillRect
LoadBitmapW
SystemParametersInfoA
CharUpperBuffA
ScrollWindow
SetCursorPos
DeleteMenu
FindWindowExA
CreateWindowExW
EndDialog
OpenIcon
UnloadKeyboardLayout
DefDlgProcW
GetUserObjectInformationA
CharToOemW
ArrangeIconicWindows
MapVirtualKeyW
CharToOemBuffA
SendMessageW
CharNextW
SendInput
IsWindowUnicode
SetForegroundWindow
IsChild
IsCharAlphaW
LoadStringW
SendMessageTimeoutW
SetClassLongW
CharUpperA
RedrawWindow
SetWindowTextA
GetWindowLongW
SendDlgItemMessageA
GetClassLongA
SetRect
DrawMenuBar
DrawFrameControl
InSendMessageEx
DestroyMenu
ClipCursor
GetWindow
ShowOwnedPopups
PostThreadMessageA
GetMenuStringA
DrawIcon
DrawStateW
IsDialogMessageW
CallWindowProcW
EndTask
CheckMenuRadioItem
GetAsyncKeyState
DispatchMessageW
wsprintfW
FindWindowW
GetWindowDC
CreateCursor
EndPaint
mouse_event
IsCharUpperA
InSendMessage
GetNextDlgTabItem
FrameRect
PostMessageA
InvertRect
GetMenuItemID
DefFrameProcW
MonitorFromRect
GetClassInfoA
InternalGetWindowText
GetForegroundWindow
ShowScrollBar
SetWindowTextW
MessageBoxW
WindowFromPoint
GetClassInfoExW
AppendMenuA
EnumChildWindows
IntersectRect
SendNotifyMessageW
IsMenu
GetUpdateRgn
keybd_event
GetCaretPos
RegisterHotKey
GetClassLongW
PostThreadMessageW
GetActiveWindow
GetSysColorBrush
DrawTextW
TileWindows
msvcrt
towupper
swprintf
fclose
perror
isprint
islower
atoi
wcsstr
sscanf
_controlfp
strrchr
vsprintf
fgetc
wcslen
free
toupper
setvbuf
clock
iswprint
__set_app_type
__p__fmode
floor
wcsrchr
__p__commode
getenv
setlocale
strncpy
wcscpy
strtok
strchr
_amsg_exit
wcscoll
_initterm
strcoll
_ismbblead
_XcptFilter
_exit
ungetc
putchar
_cexit
__setusermatherr
bsearch
strtoul
__getmainargs
kernel32
LockResource
SetLastError
TlsFree
DefineDosDeviceW
SearchPathW
lstrcmpA
ReleaseSemaphore
SizeofResource
IsValidLocale
FindFirstFileA
GetSystemWindowsDirectoryA
FoldStringW
MapViewOfFileEx
GetSystemInfo
GetProfileIntA
lstrlenA
RemoveDirectoryA
PulseEvent
GlobalFree
GlobalReAlloc
FindFirstChangeNotificationW
lstrcatA
CreateSemaphoreW
FreeLibrary
RtlUnwind
CallNamedPipeW
SetTimerQueueTimer
GlobalGetAtomNameA
CreateEventA
SetFileApisToOEM
GetTimeZoneInformation
CreateSemaphoreA
OpenSemaphoreW
HeapReAlloc
QueryPerformanceCounter
GetFileAttributesExA
GetModuleHandleW
lstrcmpW
GetTickCount
GetUserDefaultLangID
MoveFileA
CreateRemoteThread
GetTempFileNameA
ConnectNamedPipe
GetFullPathNameW
Sleep
GlobalAddAtomA
LoadResource
GetFileAttributesW
CreateFileMappingA
EnterCriticalSection
GetStartupInfoW
Exports
Exports
Sections
.text Size: 164KB - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE