Static task
static1
Behavioral task
behavioral1
Sample
245c4c4e6e1cc032d3c504264867202c_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
245c4c4e6e1cc032d3c504264867202c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
245c4c4e6e1cc032d3c504264867202c_JaffaCakes118
-
Size
395KB
-
MD5
245c4c4e6e1cc032d3c504264867202c
-
SHA1
f293f9d6a9102ab1e75418a44adb76f7fabb5758
-
SHA256
84d4030515b6cef25d201b53a1f8df11635ca087b2f0ebd92a7cebbc9d5b4fe4
-
SHA512
160130da3e49dc1bf95a3d509db5730602989043b907adfa5d4a2aec9e4bd48fd440e08ddb17874da52c663bdc12902a78a7fb437610f568179398572fe74a9f
-
SSDEEP
6144:fweZD43kpFW+51Bhxc0ASZls2QTmUcukV2VDtYIHH89GyDfu07/nlgz:f54+5HxFl4Eug2ltrQDvxU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 245c4c4e6e1cc032d3c504264867202c_JaffaCakes118
Files
-
245c4c4e6e1cc032d3c504264867202c_JaffaCakes118.exe windows:4 windows x86 arch:x86
60ce680bf6fae8b3ad4559d282c96ae9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetTimer
DestroyWindow
ChildWindowFromPoint
GetCursorPos
ModifyMenuA
EndDialog
MapWindowPoints
CreateMenu
SetFocus
GetMenuItemID
PtInRect
CreatePopupMenu
SetCapture
GetWindowLongA
SetClipboardData
GetDC
GetClientRect
UnionRect
WindowFromPoint
DestroyIcon
CreateWindowExA
MoveWindow
GetWindowDC
LoadBitmapA
GetMessageA
SetPropA
FillRect
SetDlgItemTextA
GetScrollInfo
PeekMessageA
SetCursor
CreateIconIndirect
SystemParametersInfoA
IsDialogMessageA
LoadStringA
GetMenu
GetClassNameA
InsertMenuA
CheckRadioButton
ShowWindow
DrawFrameControl
LoadIconA
GetPropA
SetWindowLongA
IsDlgButtonChecked
GetMenuItemCount
DefDlgProcA
RegisterClassA
DefWindowProcA
CreateDialogParamA
IsWindowVisible
GetSystemMetrics
DrawIconEx
IntersectRect
SetWindowPos
IsZoomed
EnableWindow
EndDeferWindowPos
LoadCursorA
DeferWindowPos
ExitWindowsEx
DialogBoxParamA
ScreenToClient
LoadAcceleratorsA
SetMenuItemInfoA
GetWindow
CloseClipboard
GetDoubleClickTime
GetSysColor
SetMenuItemBitmaps
GetWindowPlacement
SetWindowTextA
TranslateAcceleratorA
BeginPaint
SetForegroundWindow
GetDlgItem
DispatchMessageA
OffsetRect
GetClassLongA
TrackPopupMenuEx
DrawTextA
EnableMenuItem
FindWindowExA
EnumWindows
ReleaseDC
SendMessageA
BeginDeferWindowPos
GetSysColorBrush
ScrollWindowEx
GetWindowRect
UpdateWindow
FindWindowA
DefMDIChildProcA
EndPaint
TranslateMessage
GetCapture
RemoveMenu
SetScrollInfo
GetFocus
GetWindowThreadProcessId
RedrawWindow
InvalidateRgn
ClientToScreen
OpenClipboard
MsgWaitForMultipleObjects
EmptyClipboard
SetWindowPlacement
LoadImageA
GetKeyState
CheckMenuItem
KillTimer
DrawMenuBar
CallWindowProcA
LoadMenuA
RegisterClassExA
SendMessageTimeoutA
FrameRect
wsprintfA
ReleaseCapture
GetDlgCtrlID
RegisterWindowMessageA
TrackPopupMenu
GetWindowTextA
DeleteMenu
GetMenuCheckMarkDimensions
InvalidateRect
DefFrameProcA
GetParent
EnumChildWindows
InflateRect
GetSubMenu
IsIconic
ole32
CoUninitialize
CoInitialize
kernel32
DeleteCriticalSection
GetLastError
CloseHandle
GetProcAddress
SetThreadPriority
GetTapeParameters
GetModuleHandleA
ExitProcess
CreateEventA
Sleep
LoadLibraryA
shell32
ShellExecuteExA
SHGetPathFromIDListA
SHGetMalloc
Shell_NotifyIconA
SHGetFileInfoA
advapi32
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
ControlService
StartServiceA
RegOpenKeyA
QueryServiceStatus
RegDeleteKeyA
QueryServiceConfigA
CloseServiceHandle
RegCloseKey
OpenSCManagerA
CreateProcessAsUserA
RegOpenKeyExA
EqualSid
RegEnumValueA
OpenServiceA
oleaut32
OleCreateFontIndirect
ws2_32
ntohl
getservbyport
gethostbyaddr
WSAStartup
ntohs
htonl
htons
comctl32
ImageList_Create
ord17
ImageList_Destroy
CreateToolbarEx
ord6
ImageList_DrawEx
InitCommonControlsEx
ImageList_ReplaceIcon
gdi32
SelectObject
GetStockObject
RectInRegion
SaveDC
GetObjectA
ExtTextOutA
MoveToEx
SetROP2
GetDeviceCaps
BitBlt
SetBkMode
StretchBlt
SetBkColor
CreateDIBSection
GetTextExtentPoint32A
GetBkColor
Rectangle
RestoreDC
CreateFontIndirectA
SetTextColor
DeleteObject
GetTextMetricsA
StartPage
SetTextAlign
CreateRectRgnIndirect
CreateSolidBrush
CreateCompatibleBitmap
StartDocA
CreateCompatibleDC
SelectClipRgn
LineTo
SetMapMode
EndDoc
EndPage
DeleteDC
CreatePen
CreateRectRgn
comdlg32
FindTextA
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
Sections
.text Size: 75KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ