Static task
static1
Behavioral task
behavioral1
Sample
388b85eb5ecd9320a1064d7074248253_JaffaCakes118.exe
Resource
win7-20240508-en
General
-
Target
388b85eb5ecd9320a1064d7074248253_JaffaCakes118
-
Size
643KB
-
MD5
388b85eb5ecd9320a1064d7074248253
-
SHA1
f863380c12b20e8a61c506dc02f6861b66093aa4
-
SHA256
68657be04f5b550fec4671437e5dc5849408eada96f5ff44cb0972b0e28ca5be
-
SHA512
ed095b0e047aeadf7df97ca8b41807feff70c34e3c256e4cd0336235811fd1102514da133810dd364a4473cb0085cf7f6dce254b5a0b95f254f2728185dcb465
-
SSDEEP
6144:szEVDCe1/nxlwa7WAj095ZnV/0Aw2zoYOqrW54aUsN4nNkDB8qU9xyuB+B:szUDD/xlwKWA4Vg5q2UsN49qU9KB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 388b85eb5ecd9320a1064d7074248253_JaffaCakes118
Files
-
388b85eb5ecd9320a1064d7074248253_JaffaCakes118.exe windows:5 windows x86 arch:x86
1a5d56a3450e7f70f436ca701e633d93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
HeapReAlloc
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LoadLibraryW
WriteFile
GetFileType
HeapCreate
GetLocaleInfoA
GetModuleFileNameW
GetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitProcess
GetProcAddress
HeapFree
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
Sleep
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedExchange
GetProcessHeap
WaitForSingleObject
GetCurrentProcess
HeapAlloc
LCMapStringW
GetStringTypeW
WriteConsoleW
CreateFileW
SetHandleCount
GetUserDefaultLCID
InitializeCriticalSection
CreateFileA
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
InterlockedDecrement
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
CloseHandle
EnumSystemGeoID
DeviceIoControl
LoadLibraryA
VirtualAlloc
GetLastError
MulDiv
GetConsoleWindow
CreateEventA
WideCharToMultiByte
GlobalAlloc
GetLocaleInfoW
AllocateUserPhysicalPages
SetFilePointer
InterlockedIncrement
user32
RegisterClassA
ChangeDisplaySettingsA
LoadCursorA
DispatchMessageA
ShowWindow
DefWindowProcA
AdjustWindowRectEx
PeekMessageA
CreateWindowExA
UnregisterClassA
ShowCursor
TranslateMessage
GetDC
BeginPaint
SetFocus
LoadIconA
SetForegroundWindow
PostQuitMessage
RegisterClassExA
DestroyWindow
ReleaseDC
EndPaint
GetShellWindow
GetWindowRect
PostThreadMessageA
SendInput
DdeCreateStringHandleW
DrawTextA
GetFocus
GetParent
GetClientRect
DrawTextExW
SendMessageA
InflateRect
GetForegroundWindow
SetDlgItemInt
GetMenu
GetWindowTextA
CheckMenuRadioItem
SetWindowLongA
CreateAcceleratorTableA
GetWindowLongA
GetDlgItem
GetDesktopWindow
GetSysColor
SetWindowPos
GetCursorPos
SystemParametersInfoA
GetSystemMetrics
UpdateWindow
EnableWindow
DialogBoxIndirectParamA
SetDlgItemTextA
gdi32
GetBitmapBits
BitBlt
CreateEnhMetaFileA
CreateFontIndirectA
GetCurrentObject
SetBkMode
DeleteObject
SelectObject
Rectangle
GetTextAlign
CreatePen
SetTextAlign
GetObjectA
SetTextColor
ChoosePixelFormat
SetPixelFormat
GetStockObject
SwapBuffers
comdlg32
ChooseColorA
GetSaveFileNameA
shell32
SHGetFolderLocation
SHBindToParent
ole32
CoSuspendClassObjects
StringFromGUID2
CoInitialize
opengl32
glClearDepth
glMaterialfv
wglCreateContext
glVertex2f
glClear
glClearColor
glMaterialf
glOrtho
glEnd
glNormal3f
glDisable
glBegin
glShadeModel
wglMakeCurrent
glPopMatrix
glPushMatrix
glRotatef
glPolygonMode
glVertex3f
glMatrixMode
glViewport
glTranslatef
glLightfv
glEnable
glColor3f
glHint
wglDeleteContext
glLoadIdentity
glLightModelfv
glDepthFunc
glu32
gluPerspective
gluNewQuadric
gluQuadricNormals
gluCylinder
gluDeleteQuadric
gdiplus
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipFree
GdiplusShutdown
GdipSaveImageToFile
uxtheme
OpenThemeData
msacm32
acmDriverOpen
acmDriverClose
acmFormatEnumA
acmMetrics
userenv
LeaveCriticalPolicySection
avifil32
AVIStreamLength
AVIStreamGetFrameClose
AVIStreamStart
msvfw32
ICCompressorChoose
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ