Static task
static1
Behavioral task
behavioral1
Sample
f9783930fc42d414f98315fad2fafca0_JaffaCakes118.exe
Resource
win7-20240215-en
General
-
Target
f9783930fc42d414f98315fad2fafca0_JaffaCakes118
-
Size
199KB
-
MD5
f9783930fc42d414f98315fad2fafca0
-
SHA1
3bb48c191418ee8776f2860460001cc0496c2ee6
-
SHA256
6a941f71a46616aa978e96ebd18f3fcab014d93ee531ce671dd8f24dd4ecce4a
-
SHA512
7c0a739b7d8c57f9cc3dae99dff045f149ff218f0c451bc78ebbbcf9914a63cb132a2dca5dd1fa7dae67c853401b150bb7b8fe7b45c3d0bed0ffed04b7a93426
-
SSDEEP
6144:lvW7ntBa5S49H99P4x0Mz0rtGeBhz0pI:k7kS4x9h4x0RGeBSC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9783930fc42d414f98315fad2fafca0_JaffaCakes118
Files
-
f9783930fc42d414f98315fad2fafca0_JaffaCakes118.exe windows:4 windows x86 arch:x86
0faa8824e6b264f292fb997488e22671
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
PtVisible
DeleteDC
Escape
ExtSelectClipRgn
ExtTextOutW
ScaleWindowExtEx
SetViewportOrgEx
GetBkColor
SelectObject
GetTextColor
ScaleViewportExtEx
SetWindowExtEx
TextOutW
GetDeviceCaps
RectVisible
OffsetViewportOrgEx
GetMapMode
GetRgnBox
user32
CreateWindowExW
GetNextDlgGroupItem
CopyAcceleratorTableW
InvalidateRect
SendDlgItemMessageA
WinHelpW
SetRect
CharNextW
RegisterWindowMessageW
GetClassLongW
SetPropW
InvalidateRgn
IsRectEmpty
GetPropW
GetClassInfoExW
CharUpperW
GetNextDlgTabItem
MessageBeep
RemovePropW
DestroyMenu
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
shlwapi
PathRemoveFileSpecW
PathFileExistsW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathAppendW
kernel32
EnumResourceLanguagesW
ConvertDefaultLocale
WriteFile
GetCalendarInfoW
MultiByteToWideChar
SystemTimeToFileTime
FindFirstFileW
GetLocaleInfoW
SetFileTime
GetSystemDefaultLangID
DeleteFileW
ReadFile
RemoveDirectoryW
MoveFileW
InterlockedDecrement
FindNextFileW
SetFilePointer
WideCharToMultiByte
EnumResourceNamesA
CreateDirectoryW
LoadLibraryW
GetCurrentProcessId
CreateFileW
FindClose
GetFileAttributesW
ExitProcess
GetModuleFileNameW
GetCurrentDirectoryW
lstrcpyW
GetVersion
LocalFileTimeToFileTime
GetProcAddress
ole32
CoTaskMemFree
CoCreateInstance
CLSIDFromProgID
CoGetClassObject
CoRetireServer
CoRevokeClassObject
CoInitialize
CoUninitialize
OleIsCurrentClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleFlushClipboard
CoTaskMemAlloc
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
oleacc
LresultFromObject
CreateStdAccessibleObject
advapi32
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegQueryValueExW
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ