Static task
static1
Behavioral task
behavioral1
Sample
1484286a71381603fa0f4957b7b1d0df_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
1484286a71381603fa0f4957b7b1d0df_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
1484286a71381603fa0f4957b7b1d0df_JaffaCakes118
-
Size
408KB
-
MD5
1484286a71381603fa0f4957b7b1d0df
-
SHA1
fb8d0bee9c576aba01f23562f673a7817f857d28
-
SHA256
7088659e0bb624f163c0d12db7ac94f156a7e9f5060c0a04b5b55a6ee29a7492
-
SHA512
4c1bdf1786b6497dd97ac69c5329c1a222844e10911011c337ff0bb12a1ec8708079d780c4d08c4efbccdbec06bb8178e6162506accc616148e7086167b88ac8
-
SSDEEP
12288:dcePxSQPyEekQEAddaZGp3vSxbisuefOOdRX1UpFSI4:LPxSQPyEekQEAddaZGp3vSxGIfHRK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1484286a71381603fa0f4957b7b1d0df_JaffaCakes118
Files
-
1484286a71381603fa0f4957b7b1d0df_JaffaCakes118.exe windows:4 windows x86 arch:x86
075d53bd6aa325473431a1a81ffa3013
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateAcceleratorW
MessageBeep
GetClipboardViewer
SetMenuDefaultItem
ToAsciiEx
GetScrollRange
GetMessageA
DrawStateW
KillTimer
SetTimer
CharLowerW
GetClipboardData
IsCharAlphaW
GetFocus
GetQueueStatus
UnionRect
DrawAnimatedRects
SetRectEmpty
PtInRect
RemovePropA
ScreenToClient
InsertMenuA
LoadStringW
LockWindowUpdate
IsCharLowerA
LoadCursorFromFileA
SetFocus
IsCharUpperA
EnumThreadWindows
GetDlgItemInt
GetKeyboardLayoutNameW
CharUpperBuffW
GetPropA
DrawTextW
PostQuitMessage
LoadMenuA
TrackPopupMenu
DrawTextA
EnumClipboardFormats
SetPropA
PostThreadMessageW
SetCursor
SendInput
EmptyClipboard
CloseClipboard
VkKeyScanExW
DefDlgProcA
GetDlgItemTextA
CharToOemBuffA
WinHelpW
GrayStringA
IsDlgButtonChecked
IsMenu
GetClassInfoW
SetClassLongW
IsChild
MessageBoxA
CallWindowProcA
CreateWindowExW
GetDlgItemTextW
GetKeyboardLayout
RegisterWindowMessageA
EnableWindow
DialogBoxParamA
DispatchMessageA
wvsprintfA
CharNextW
IsWindowVisible
keybd_event
IsIconic
FillRect
CopyImage
CheckRadioButton
GetClassNameW
GetScrollPos
MapVirtualKeyExA
CreateDialogIndirectParamW
DrawIconEx
RegisterClipboardFormatW
GetKeyboardState
DdeQueryStringA
GetKeyNameTextW
CharPrevW
ValidateRect
CharLowerA
GetDlgCtrlID
BeginPaint
CharToOemA
DragDetect
UnhookWinEvent
FindWindowW
GetDC
DrawIcon
SetDlgItemInt
InvalidateRgn
CreateIconFromResource
SetKeyboardState
TranslateMessage
RegisterClassExW
EnumDisplaySettingsA
GetClassNameA
SystemParametersInfoA
SetMenu
GetWindowModuleFileNameA
FindWindowA
VkKeyScanExA
GetCursor
ShowOwnedPopups
SetWindowLongA
FlashWindow
CheckMenuItem
LoadIconA
DdeDisconnect
OemToCharBuffA
GetClipboardFormatNameW
CharUpperW
GetUserObjectInformationW
WindowFromDC
DdeFreeStringHandle
MapVirtualKeyExW
GetKeyboardLayoutList
SetWindowPos
OpenClipboard
GetClipCursor
DialogBoxIndirectParamA
RegisterClipboardFormatA
MapDialogRect
WaitMessage
BringWindowToTop
GrayStringW
ChildWindowFromPointEx
GetMenuItemRect
ChangeDisplaySettingsA
InSendMessage
IsCharAlphaNumericA
GetScrollInfo
GetNextDlgTabItem
DrawCaption
DrawStateA
DestroyMenu
MessageBoxExW
DefWindowProcA
GetProcessWindowStation
IsZoomed
IsClipboardFormatAvailable
ToAscii
GetSysColorBrush
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
labs
_fsopen
fopen
_onexit
__dllonexit
_wcsrev
gmtime
_setmbcp
rasapi32
RasDialA
kernel32
GetQueuedCompletionStatus
FormatMessageA
GetPrivateProfileIntA
GetModuleHandleA
GetStartupInfoA
ClearCommBreak
mfc42
ord1096
ord4425
ord4627
ord1005
ord1088
ord1003
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord1008
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord1048
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord815
ord561
ord3738
ord641
ord1088
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord1033
ord4465
ord3259
ord1002
ord2982
ord5714
ord1080
ord5307
ord4698
ord1047
ord2725
ord5302
ord1099
ord3346
ord2396
ord1049
ord1089
ord3922
ord5731
ord1040
ord2554
ord4486
ord6375
ord4274
ord324
ord4234
ord1168
ord1047
ord4424
ord1576
Sections
.text Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 963KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 260KB - Virtual size: 258KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ