Static task
static1
Behavioral task
behavioral1
Sample
37acfec26bacb7db7da65d747c299389_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
37acfec26bacb7db7da65d747c299389_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
37acfec26bacb7db7da65d747c299389_JaffaCakes118
-
Size
845KB
-
MD5
37acfec26bacb7db7da65d747c299389
-
SHA1
ec6fdfeb10cc8aa766edf753657489c244002762
-
SHA256
ae8164dbe898724c83105c99ddd2ddd4b3b0936a56dc0fb7803f6ac23b234c15
-
SHA512
162afd5d53e6baeb82865fbfe1dd5a102201775f8a6072e553c69b58395e89df4a9cbf44a69fa0d6b468b882d358d071d8aecca97513a5832303f6dd65137544
-
SSDEEP
24576:y9kIAZmCVGK7z90rqa0Xqlp1p0zehaAva:4dA8MGe90uN212zRA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37acfec26bacb7db7da65d747c299389_JaffaCakes118
Files
-
37acfec26bacb7db7da65d747c299389_JaffaCakes118.exe windows:5 windows x86 arch:x86
30bdf0d68dec73289f4fd6af4cbca6b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeFreeStringHandle
DdeAddData
MonitorFromWindow
SystemParametersInfoW
WinHelpW
IsDialogMessageW
CopyIcon
CreateIconFromResourceEx
CreateIconFromResource
LoadBitmapW
GetParent
UnionRect
CopyRect
ClientToScreen
AdjustWindowRectEx
GetWindowRect
DeleteMenu
CreatePopupMenu
LoadAcceleratorsW
GetNextDlgTabItem
GetDlgItemInt
SetDlgItemInt
IsIconic
DeferWindowPos
ShowWindow
GetClassInfoW
RegisterClassW
CallWindowProcW
RegisterWindowMessageW
shlwapi
SHDeleteEmptyKeyW
PathCreateFromUrlW
UrlUnescapeW
UrlIsW
UrlCanonicalizeW
PathStripToRootW
PathStripPathW
SHDeleteKeyW
PathRemoveFileSpecW
PathRemoveExtensionW
PathRemoveBlanksW
PathRemoveBackslashW
PathParseIconLocationW
PathIsURLW
PathIsUNCServerW
SHDeleteValueW
SHGetValueW
SHSetValueW
AssocCreate
AssocQueryStringW
SHAutoComplete
PathSkipRootW
PathIsNetworkPathW
PathIsUNCW
PathIsRootW
PathIsRelativeW
PathIsDirectoryW
PathGetDriveNumberW
PathFindNextComponentW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathCombineW
PathBuildRootW
PathAppendW
PathAddBackslashW
SHStrDupW
StrRetToBufW
StrCmpIW
StrCmpW
StrTrimW
StrToIntExW
StrToIntW
StrStrIW
StrRChrW
StrPBrkW
StrFormatByteSizeW
StrCmpNW
StrChrW
kernel32
SwitchToThread
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
GetStringTypeW
OutputDebugStringW
LoadLibraryExW
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
WriteFile
GetStartupInfoW
DeleteCriticalSection
GetStdHandle
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
DecodePointer
EncodePointer
SetLastError
GetCommandLineW
GetConsoleWindow
GetLocaleInfoW
GetACP
QueryPerformanceCounter
FindFirstFileW
ExpandEnvironmentStringsW
GetModuleFileNameW
LoadLibraryW
SetWaitableTimer
CreateEventW
CreateMutexW
lstrcmpiW
FormatMessageW
FileTimeToSystemTime
CloseHandle
FindClose
ReadFile
GetFileSize
GetFileType
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
RtlUnwind
GetProcAddress
GlobalUnlock
LocalAlloc
VirtualAlloc
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetEnvironmentStringsW
CreateFileW
GetCurrentThreadId
GetLastError
shell32
SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetFileInfoW
ExtractIconExW
DragFinish
DragQueryFileW
SHGetSpecialFolderPathW
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 752KB - Virtual size: 751KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE