Static task
static1
Behavioral task
behavioral1
Sample
307ddad4978be66ba0ec5b16bcd02ab7_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
307ddad4978be66ba0ec5b16bcd02ab7_JaffaCakes118
-
Size
535KB
-
MD5
307ddad4978be66ba0ec5b16bcd02ab7
-
SHA1
a0bb91250ab1aa1c935a44d47969c49cadf57f68
-
SHA256
1482c93c1a6feee47c14934c0c86ea6fae318cb0ac66ab40b8dbdc01c704c8a8
-
SHA512
e7c12fefacf9495cf8c1d2c7f5c55df4929999711de22d798c88476c16ca83e9cdfe4eb722f2adc76d051bc31a4722bae84e00eca1e150a17d669af7c9a063c0
-
SSDEEP
12288:fIpUecFlD5o5ZboutjwjolfnrERuz1Odbyk:ecH5obdjGinQRuzQdbX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 307ddad4978be66ba0ec5b16bcd02ab7_JaffaCakes118
Files
-
307ddad4978be66ba0ec5b16bcd02ab7_JaffaCakes118.exe windows:5 windows x86 arch:x86
90ce706d248a6c05845525c70ebf5009
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpConnect
WinHttpSetOption
WinHttpWriteData
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
shlwapi
StrToIntExW
StrToIntW
PathFindFileNameW
PathStripPathW
StrStrIW
StrToIntExA
PathFindExtensionW
PathRemoveFileSpecW
PathRenameExtensionW
StrChrIW
PathAddBackslashW
PathFileExistsW
PathIsDirectoryW
PathAppendW
SHCreateStreamOnFileEx
kernel32
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
HeapReAlloc
VirtualAlloc
VirtualFree
lstrcmpiA
GetProcAddress
LoadLibraryW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
GetVersionExW
WaitForMultipleObjects
CloseHandle
MultiByteToWideChar
ReadFile
GetFileSize
CreateFileW
Sleep
CreateThread
CreateDirectoryW
DeleteFileW
GetTempFileNameW
GetTempPathW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TryEnterCriticalSection
SetFilePointer
GetModuleFileNameW
WriteFile
GetFileAttributesW
lstrlenW
GetPrivateProfileStringW
lstrcatW
lstrcpyW
SetEnvironmentVariableW
GetLastError
FreeLibrary
LoadLibraryExW
GetProcessId
ExpandEnvironmentStringsW
WideCharToMultiByte
lstrcpynW
SetHandleCount
EnterCriticalSection
LeaveCriticalSection
FlushFileBuffers
WaitForSingleObject
SetEvent
CreateEventW
GetCurrentThread
GetModuleHandleW
GetExitCodeProcess
lstrlenA
GetCommandLineW
HeapCreate
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
MoveFileW
HeapAlloc
HeapFree
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetFileType
ExitProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTickCount
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetConsoleCP
GetConsoleMode
LoadLibraryA
GetLocaleInfoW
SetStdHandle
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
InitializeCriticalSection
user32
TranslateMessage
DispatchMessageW
LoadIconW
PostMessageW
IsDialogMessageW
GetMessageW
SetWindowPos
DestroyWindow
MessageBoxW
GetDlgCtrlID
GetAncestor
DestroyMenu
TrackPopupMenuEx
FillRect
GetSysColorBrush
FindWindowExW
EnableWindow
BringWindowToTop
GetSysColor
GetWindowTextLengthW
GetDlgItemTextW
SetTimer
GetCursorPos
GetWindowTextW
EnumChildWindows
EnumWindows
GetWindowThreadProcessId
SetForegroundWindow
CreateWindowExW
GetWindowRect
MoveWindow
IsWindow
DrawTextW
SetWindowTextW
UpdateWindow
InvalidateRect
GetDC
GetClientRect
DrawFrameControl
ReleaseDC
GetParent
GetWindowLongW
SetPropW
LoadCursorW
SetCursor
GetDlgItem
GetPropW
ShowWindow
SetFocus
CallWindowProcW
SetWindowLongW
RemovePropW
SendMessageW
MapWindowPoints
ScreenToClient
AppendMenuW
CreatePopupMenu
LoadImageW
CreateDialogParamW
PostQuitMessage
EndDialog
EndPaint
BeginPaint
MessageBeep
CreateDialogIndirectParamW
CheckDlgButton
wsprintfW
SetDlgItemTextW
IsDlgButtonChecked
KillTimer
SendDlgItemMessageW
gdi32
CreateDIBSection
GetTextExtentPoint32W
SelectObject
DeleteObject
CreateCompatibleBitmap
CreatePatternBrush
BitBlt
CreateCompatibleDC
DeleteDC
SetBkColor
CreateSolidBrush
SetBkMode
SetTextColor
GetStockObject
CreateFontW
CreateFontIndirectW
GetObjectW
advapi32
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
SHGetPathFromIDListW
ShellExecuteExW
Shell_NotifyIconW
SHCreateDirectoryExW
ord155
SHOpenFolderAndSelectItems
ord190
CommandLineToArgvW
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
windowscodecs
WICConvertBitmapSource
msimg32
AlphaBlend
comctl32
ord17
Sections
.text Size: 374KB - Virtual size: 373KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ