Static task
static1
Behavioral task
behavioral1
Sample
31c2ce433472196d637f3f9a5c1c2a03_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
31c2ce433472196d637f3f9a5c1c2a03_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
31c2ce433472196d637f3f9a5c1c2a03_JaffaCakes118
-
Size
329KB
-
MD5
31c2ce433472196d637f3f9a5c1c2a03
-
SHA1
731a00c0fb56a5599c5c05fa75b602abc416ca18
-
SHA256
58ef87962259fb31e7d33393c5cb7b20b918ae79f6fe8e222c6601a3e2ddf3d6
-
SHA512
438954da01f438042b8d629700acd82498279f19483a8fc7ce0337b0610809fc1cfd11f68a47e514876655a276d56e3bfc5dfb10405b4a0d7a8bf1a9311f8e95
-
SSDEEP
6144:6FDObFa2pXBJ/f11s+J7xmGm0O36kQ2XBKnouECmg/4FhC/4a3KQiF:8DO5jL9f11s+dxm936k1C9wFhP6gF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c2ce433472196d637f3f9a5c1c2a03_JaffaCakes118
Files
-
31c2ce433472196d637f3f9a5c1c2a03_JaffaCakes118.exe windows:4 windows x86 arch:x86
517341ae1ccc6afec85c307c3a906f58
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mpr
WNetConnectionDialog
WNetDisconnectDialog
WNetEnumResourceW
user32
GetSysColor
ShowWindow
GetSysColorBrush
CopyRect
GetCapture
RegisterClassW
SetMenuItemBitmaps
DefWindowProcW
RegisterWindowMessageW
ReleaseDC
GetMenuItemID
PeekMessageW
GetTopWindow
GetWindowLongW
PtInRect
DispatchMessageW
LoadCursorW
GetFocus
RemovePropW
GetKeyState
IsWindowVisible
ClientToScreen
DestroyMenu
SystemParametersInfoA
GetCursorPos
GetForegroundWindow
GetWindowPlacement
LoadBitmapW
DestroyWindow
SetWindowLongW
CreateWindowExW
GetMessageW
GetWindowThreadProcessId
GetMessagePos
UnhookWindowsHookEx
GetPropW
GetClassNameW
GrayStringW
DrawTextExW
DrawTextW
GetWindow
EnableMenuItem
GetSystemMetrics
GetMessageTime
IsWindowEnabled
GetActiveWindow
ValidateRect
SetPropW
CallWindowProcW
GetDlgCtrlID
MapWindowPoints
GetClientRect
GetLastActivePopup
EnableWindow
GetClassLongW
SendMessageW
GetClassInfoW
PostMessageW
IsIconic
GetDlgItem
GetMenuItemCount
IsWindow
CheckMenuItem
GetMenu
LoadIconW
SetWindowPos
GetWindowTextW
SetWindowTextW
GetMenuCheckMarkDimensions
AdjustWindowRectEx
GetDC
TranslateMessage
WinHelpW
GetWindowRect
MessageBoxW
advapi32
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
SetNamedSecurityInfoW
SetEntriesInAclW
LookupAccountSidW
RegCloseKey
RegEnumKeyW
IsValidSid
GetAce
AddAccessAllowedAce
AdjustTokenPrivileges
GetNamedSecurityInfoW
RegSetValueExW
InitializeAcl
CopySid
RegEnumKeyExW
LookupAccountNameW
RegQueryValueW
DeleteAce
RegQueryValueExW
GetKernelObjectSecurity
EqualSid
LookupPrivilegeValueW
MakeAbsoluteSD
kernel32
GlobalReAlloc
GlobalFlags
GetLocaleInfoW
GetModuleHandleW
TlsGetValue
LoadLibraryA
SetLastError
GetProcAddress
FindResourceW
RtlUnwind
LeaveCriticalSection
GetConsoleMode
GlobalFindAtomW
TlsFree
GlobalAddAtomW
GetModuleFileNameW
lstrlenW
GlobalUnlock
FindNextFileW
FindFirstFileW
GlobalHandle
LoadLibraryExW
GetFileAttributesW
GetConsoleCP
TlsSetValue
GetCurrentProcess
SetFilePointer
TlsAlloc
HeapAlloc
GetCurrentThread
GetCPInfo
CloseHandle
QueryPerformanceCounter
GlobalAlloc
GetModuleHandleA
InitializeCriticalSection
LoadLibraryW
GetVersionExW
WriteConsoleW
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
ReadFile
GetLastError
SizeofResource
FindClose
GlobalLock
GetVersionExA
LoadResource
InterlockedExchange
IsValidCodePage
GlobalFree
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileA
GetACP
LocalFree
HeapFree
DeleteCriticalSection
CreateFileW
GetStartupInfoA
FormatMessageW
VirtualFree
EnumResourceLanguagesW
ExitProcess
IsDebuggerPresent
lstrcmpA
GetCurrentProcessId
LCMapStringW
lstrlenA
GetCurrentThreadId
GetConsoleOutputCP
SetErrorMode
WritePrivateProfileStringW
WriteFile
GetSystemTimeAsFileTime
GetCommandLineW
GetFileType
FlushFileBuffers
Sleep
GetStdHandle
HeapSize
HeapReAlloc
HeapCreate
GetStringTypeA
EnterCriticalSection
LocalAlloc
RaiseException
LockResource
GetModuleFileNameA
GetProcessHeap
ConvertDefaultLocale
netapi32
NetDfsSetInfo
NetApiBufferFree
oleaut32
VARIANT_UserUnmarshal
VarUI8FromUI2
VarAbs
SysStringLen
Sections
.text Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ