Static task
static1
Behavioral task
behavioral1
Sample
22f846c65feea88699663333d0448941_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
22f846c65feea88699663333d0448941_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
22f846c65feea88699663333d0448941_JaffaCakes118
-
Size
2.2MB
-
MD5
22f846c65feea88699663333d0448941
-
SHA1
01f3c496cc7bd84b683f30c7ced15320923c674f
-
SHA256
517ca3b38cbef3a5343fca4000fb5dfe755de4f55442a6bb99ea0bdd1d1591ac
-
SHA512
58544a5d816389e2cd44dd0d9041d475092360f2d2c2da1a5471921af66aa2893ff1384150566393d4358b987f2e285a96c563bc08932f0fcdf3288cb425cbdc
-
SSDEEP
49152:oUnseNAA5SMlzWKE+oxi2N5v4nCtsSUmBsoGBVweIQ29NAkiLKpWVlADd:oqBqiir+mn5tjUmBiBVwel392pWVeDd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22f846c65feea88699663333d0448941_JaffaCakes118
Files
-
22f846c65feea88699663333d0448941_JaffaCakes118.exe windows:4 windows x86 arch:x86
351e2a342fb4ba11f8cd7f61ad22363c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsDirectoryW
PathRemoveFileSpecW
PathIsUNCW
StrToIntA
PathAppendW
PathFileExistsW
PathStripToRootW
UrlUnescapeW
PathFindExtensionW
PathCombineW
StrTrimA
advapi32
RegQueryValueExW
RegOpenKeyExA
SetSecurityDescriptorDacl
RegCloseKey
RegDeleteKeyW
RegQueryValueExA
RegDeleteValueW
RegDeleteKeyA
AdjustTokenPrivileges
CloseServiceHandle
comdlg32
GetOpenFileNameW
GetSaveFileNameW
GetOpenFileNameA
oleaut32
SafeArrayPutElement
SafeArrayCreate
user32
SystemParametersInfoW
GetClientRect
IsChild
ChildWindowFromPointEx
CharUpperBuffW
DialogBoxParamW
CreateWindowExW
EnableWindow
GetWindowDC
GetWindowLongW
AppendMenuW
wsprintfW
SetRect
GetMenuItemCount
IsRectEmpty
PtInRect
ShowCaret
GetWindow
EndPaint
wsprintfA
GetWindowPlacement
CharToOemA
MessageBoxW
ReleaseCapture
IsZoomed
GetWindowThreadProcessId
CharLowerW
SendMessageW
EndDialog
SetCapture
GetDlgCtrlID
KillTimer
GetSubMenu
TrackPopupMenuEx
CreatePopupMenu
WaitForInputIdle
DestroyWindow
LoadStringA
LoadIconA
GetMessageW
GetMenuDefaultItem
WindowFromPoint
IsWindowVisible
LoadCursorW
SetDlgItemTextW
EnumWindows
EnableMenuItem
SetCursor
GetWindowRect
FindWindowExA
GetFocus
GetSystemMetrics
CharToOemBuffA
GetLastActivePopup
ShowWindow
DrawEdge
LoadStringW
InflateRect
SetMenuItemBitmaps
SetDlgItemTextA
BeginPaint
GetClassInfoW
IsWindow
CharNextW
MessageBoxA
PeekMessageA
GetSysColor
ScreenToClient
GetDlgItem
CopyRect
InvalidateRect
GetDC
SetWindowLongW
LoadIconW
GetWindowTextLengthW
kernel32
MulDiv
FindNextFileA
SetLastError
GetProcAddress
GetCurrentThreadId
IsValidCodePage
ReadFile
CloseHandle
Sleep
CreateFileA
UnhandledExceptionFilter
GetEnvironmentStringsA
SetUnhandledExceptionFilter
SetFileTime
InterlockedDecrement
lstrcmpA
HeapReAlloc
GetLastError
CreateFileW
GetCurrentProcessId
LeaveCriticalSection
GetModuleHandleA
LocalAlloc
DeleteCriticalSection
SizeofResource
CreateEventA
ReleaseMutex
VirtualAlloc
GetConsoleMode
InterlockedIncrement
InterlockedCompareExchange
GetTickCount
HeapCreate
HeapSize
IsDebuggerPresent
GlobalFree
lstrlenW
GetLocaleInfoA
GetModuleFileNameA
QueryPerformanceCounter
FileTimeToSystemTime
RaiseException
GetModuleFileNameW
GetStartupInfoA
FindClose
GetSystemTimeAsFileTime
GetVersionExA
SetFileAttributesA
FreeLibrary
LoadLibraryA
TerminateProcess
GetACP
Sections
.text Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ