Static task
static1
Behavioral task
behavioral1
Sample
f322e6e0f8de3a88c78cb181f717870c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f322e6e0f8de3a88c78cb181f717870c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f322e6e0f8de3a88c78cb181f717870c_JaffaCakes118
-
Size
61KB
-
MD5
f322e6e0f8de3a88c78cb181f717870c
-
SHA1
614cd0e24bd8f50c28450e9d8ad255d42704551f
-
SHA256
b96300feedaf1e5e82eebc23b9b866c0807be620c314f215486cfb4b67f5b4ad
-
SHA512
3ab96ed7d97d773da69592f29ce46035936ccd493313ff45ad4b7b77af05456dbb6d3aadb77cc10412164cd122ba3792249382c933bd542c63c2cbf07b494c45
-
SSDEEP
1536:UaNr2MLzNDLUYLnpKzXsD4MJyn47OJ6Mtb:nrdzNDbLnpKzXsan46IMtb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f322e6e0f8de3a88c78cb181f717870c_JaffaCakes118
Files
-
f322e6e0f8de3a88c78cb181f717870c_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e3ee910cac26b0d1ed7295b7fcd584f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
InterlockedIncrement
GetLastError
VirtualProtect
CreateThread
UnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapDestroy
EnterCriticalSection
MultiByteToWideChar
GetCurrentProcess
CreateFileW
GetProcessHeap
GetCommandLineA
GetCurrentProcess
GetProcessHeap
WideCharToMultiByte
GetProcessHeap
lstrcmpiW
CreateThread
GetLastError
QueryPerformanceCounter
VirtualProtect
GetCommandLineA
VirtualProtect
CreateThread
CreateThread
GetCommandLineA
SetEvent
ExitProcess
lstrcmpiW
ExitProcess
WideCharToMultiByte
GetModuleHandleW
lstrcmpiW
Sleep
HeapAlloc
Sleep
GetModuleHandleA
GetModuleHandleW
WriteFile
GetProcAddress
GetModuleHandleA
TerminateProcess
lstrlenW
GetCommandLineW
CreateFileW
GetCurrentProcess
ExitProcess
lstrlenW
MultiByteToWideChar
VirtualProtect
GetACP
GetCurrentProcess
HeapDestroy
GetStartupInfoA
VirtualAlloc
VirtualFree
GetCurrentProcessId
InterlockedDecrement
MultiByteToWideChar
ReadFile
HeapAlloc
GetCurrentThreadId
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetTickCount
GetCurrentProcess
GetSystemTimeAsFileTime
GetModuleHandleW
HeapFree
lstrcpyW
gdi32
CreateBitmap
CreatePen
SetTextColor
CreateRectRgn
SetWindowExtEx
Rectangle
DeleteObject
SetStretchBltMode
SetTextAlign
DeleteObject
GetObjectA
GetObjectW
TranslateCharsetInfo
SetBkMode
SelectPalette
GetDeviceCaps
GetObjectW
MoveToEx
RealizePalette
CreateCompatibleBitmap
GetStockObject
CreateSolidBrush
SetBkMode
GetStockObject
SetMapMode
GetDeviceCaps
CreatePen
SetBkMode
GetTextMetricsW
GetTextExtentPointW
GetObjectW
GetDeviceCaps
CreateBitmap
RestoreDC
TranslateCharsetInfo
TextOutW
TextOutW
CreateBitmap
CreateBitmap
CreateCompatibleBitmap
GetTextExtentPointW
SetBkColor
RealizePalette
CreateFontIndirectW
SetBkColor
StretchBlt
SetBkColor
MoveToEx
StretchBlt
GetObjectA
TextOutW
SetBkColor
CreateFontIndirectW
LineTo
Rectangle
CreateSolidBrush
BitBlt
BitBlt
SelectObject
CreateSolidBrush
LineTo
SetTextAlign
SetBkMode
CreateSolidBrush
StretchBlt
CreateRectRgn
RestoreDC
BitBlt
GetTextExtentPoint32W
ExtTextOutW
user32
LoadBitmapW
EnableMenuItem
GetThreadDesktop
GetParent
LoadIconA
UnregisterClassW
AppendMenuW
GetParent
SetWindowLongA
UpdateWindow
InvalidateRect
TranslateMessage
GetSysColorBrush
CloseDesktop
wsprintfW
EnableMenuItem
CloseDesktop
GetMenu
PostMessageA
CheckMenuItem
SendDlgItemMessageW
SetWindowTextW
PtInRect
EndDeferWindowPos
CharUpperW
GetCursorPos
SetWindowLongA
GetFocus
BringWindowToTop
LoadMenuW
OffsetRect
OpenWindowStationW
OffsetRect
SetProcessWindowStation
KillTimer
SetCapture
SetFocus
RegisterWindowMessageW
LoadIconW
RegisterClassW
CharNextW
GetMenu
SetScrollPos
SetWindowTextA
GetSysColor
ReleaseDC
ShowWindow
OpenWindowStationW
GetParent
IsWindowVisible
RegisterClassA
PeekMessageW
SetThreadDesktop
IsDlgButtonChecked
SetWindowLongW
GetMenu
SetForegroundWindow
LoadCursorA
CheckMenuItem
FindWindowW
IsZoomed
DrawIcon
IsWindowEnabled
GetMenu
GetWindowPlacement
PostThreadMessageW
DialogBoxParamW
LoadCursorA
IsWindowVisible
CharUpperW
SetWindowPlacement
EnumWindows
MoveWindow
IsClipboardFormatAvailable
SendMessageW
DrawTextW
DestroyWindow
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ