Static task
static1
Behavioral task
behavioral1
Sample
02e09610105c8694b6b8b706f0bd42ce_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
02e09610105c8694b6b8b706f0bd42ce_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
02e09610105c8694b6b8b706f0bd42ce_JaffaCakes118
-
Size
207KB
-
MD5
02e09610105c8694b6b8b706f0bd42ce
-
SHA1
d4fc90d5b32b164deed74c8cae538035b4f8157d
-
SHA256
fd224776b4fb97e51e1d9071c78e506a40c3973e5552ec1ae756fa370363b59d
-
SHA512
2cc61c1a8a4da392e204476ac47803749070df0023aa734cecc165cf2925912db49f1e4d28af4a67d6ebd8614dc47c07ee2cf022c80c9cabb77146265dae87ac
-
SSDEEP
3072:e05s6ERniyCFcPmezXXeJAx+yUjXxSzrMARdD15vQ:eZ1iVFmmezHe4+5LxJAPQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02e09610105c8694b6b8b706f0bd42ce_JaffaCakes118
Files
-
02e09610105c8694b6b8b706f0bd42ce_JaffaCakes118.exe windows:5 windows x86 arch:x86
ba9f0f43ec00b77b988ec94e9c3be759
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
SetFilePointer
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
ReadFile
MultiByteToWideChar
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
ExitProcess
Sleep
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
DeleteCriticalSection
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
lstrcpyA
LocalFree
GetFileInformationByHandle
GetCurrentProcessId
FileTimeToLocalFileTime
CloseHandle
GetCurrentThreadId
GetModuleHandleA
lstrcmpiW
LockResource
LocalAlloc
LoadLibraryA
GetLocalTime
GlobalFree
GetProcAddress
lstrcmpiA
SetLastError
GetLastError
SetThreadLocale
GlobalUnlock
lstrcatA
FileTimeToSystemTime
MulDiv
CreateFileA
WideCharToMultiByte
GlobalAlloc
GetEnvironmentStrings
WriteFile
ExpandEnvironmentStringsA
GetModuleHandleW
FreeEnvironmentStringsA
GlobalLock
SystemTimeToFileTime
GlobalAddAtomA
LoadLibraryExW
lstrlenA
FreeResource
FindResourceA
GlobalDeleteAtom
TlsFree
user32
DefMDIChildProcA
OpenClipboard
GetCursor
LookupIconIdFromDirectory
AppendMenuA
FindWindowA
LoadCursorA
DialogBoxParamA
FreeDDElParam
GetSysColorBrush
UnpackDDElParam
PostMessageA
mouse_event
GetWindowThreadProcessId
RegisterClassA
GetWindow
CreatePopupMenu
ShowWindow
GetCursorPos
SetWindowPos
DefWindowProcA
EndDialog
GetDlgItem
ReleaseDC
GetClassNameW
CreateWindowExA
GetClipboardData
GetWindowLongA
EndPaint
DestroyWindow
SetCursor
CloseClipboard
GetClassNameA
GetWindowRect
RegisterClassExA
PostQuitMessage
SendDlgItemMessageA
GetTopWindow
SetCapture
DrawTextA
DrawIconEx
SetForegroundWindow
IsClipboardFormatAvailable
GetParent
AttachThreadInput
LoadIconA
EnumDisplaySettingsA
wsprintfA
DrawIcon
FindWindowExA
WindowFromPoint
GetClientRect
CreateMenu
SetFocus
SendMessageA
BeginPaint
EnumWindows
GetIconInfo
GetDC
GetForegroundWindow
GetCursorInfo
RegisterClipboardFormatA
CopyIcon
SetRect
MessageBoxA
InvalidateRect
BringWindowToTop
gdi32
SetWindowExtEx
SetTextColor
CreateHatchBrush
DeleteDC
GetDeviceCaps
CreateFontIndirectA
GetDIBits
SetBkColor
CreateDCA
SetDIBitsToDevice
SelectObject
CreateCompatibleDC
SetMapMode
Rectangle
StartDocA
Polyline
SetViewportExtEx
GetTextMetricsA
EndDoc
GetStockObject
CreateSolidBrush
BitBlt
DeleteObject
EndPage
CreateDIBSection
StartPage
winspool.drv
StartDocPrinterA
EndDocPrinter
GetPrinterDataA
OpenPrinterA
ClosePrinter
StartPagePrinter
ord201
comdlg32
PageSetupDlgA
PrintDlgA
advapi32
ConvertSidToStringSidA
OpenEventLogW
CreateWellKnownSid
RegOpenKeyA
RegCloseKey
CloseEventLog
RegQueryValueExA
ole32
CoTaskMemFree
PropVariantClear
CoInitializeSecurity
CreateStreamOnHGlobal
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
GetRunningObjectTable
CoTaskMemAlloc
CoInitializeEx
IIDFromString
CreateFileMoniker
oleaut32
OleCreatePictureIndirect
SysFreeString
SysAllocString
ws2_32
WSCDeinstallProvider
netapi32
Netbios
mpr
WNetGetConnectionA
WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
activeds
ord14
gdiplus
GdiplusShutdown
GdipDeleteGraphics
GdipDrawEllipseI
GdipFree
GdipDeletePen
GdipCreateFromHDC2
GdiplusStartup
GdipAlloc
GdipDrawRectangleI
GdipCreatePen1
authz
AuthzInitializeContextFromSid
AuthzFreeContext
AuthzFreeResourceManager
AuthzInitializeResourceManager
Sections
.text Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ