Static task
static1
Behavioral task
behavioral1
Sample
4e998015e192e6f4ad7b9015e128acfc_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4e998015e192e6f4ad7b9015e128acfc_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4e998015e192e6f4ad7b9015e128acfc_JaffaCakes118
-
Size
262KB
-
MD5
4e998015e192e6f4ad7b9015e128acfc
-
SHA1
f4ed6daa0729ff43f3a2326d6a5d2034ed38ce16
-
SHA256
d4d696d9fa782885ed847d527faf20d3b4c7828fb7aba98b47965bde870b2d0b
-
SHA512
d87334801b307323a190f682c7cc33d80887ba7955b2fb71c981211fa76041b193889ef70b33cd3f4af13d21fcd42e8a15dafe6330e719112f2f55610571d551
-
SSDEEP
3072:D1qJOALuppiwb68h5xGMfQLAFRh1y6xqd1R0qFmAyUxEs8n8fyR:DgJ7Lu/B7GSScRXy6i1Gq8LUxEs8AyR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e998015e192e6f4ad7b9015e128acfc_JaffaCakes118
Files
-
4e998015e192e6f4ad7b9015e128acfc_JaffaCakes118.exe windows:5 windows x86 arch:x86
4fb48de2d2bf751a47efd87a73514e8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapSize
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetFilePointer
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetLastError
WideCharToMultiByte
GetProcAddress
GetConsoleWindow
lstrlenA
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
WriteFile
ExitProcess
Sleep
GetModuleHandleW
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
HeapFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
SetEvent
WaitForMultipleObjects
GetModuleFileNameA
GetLocaleInfoA
SetLastError
GetModuleHandleA
LoadLibraryA
user32
TranslateMessage
PeekMessageA
GetKeyboardLayout
GetWindowTextA
GetWindowTextLengthA
LoadStringA
KillTimer
GetClassNameA
EnumDesktopsA
GetDlgItem
SetWindowLongA
GetSysColor
DefWindowProcA
DispatchMessageA
SetTimer
SetWindowRgn
GetWindowLongA
RegisterClassExA
LoadCursorA
LoadIconA
MessageBoxA
SetWindowPos
GetDC
FindWindowA
EndPaint
ReleaseDC
BeginPaint
CreateWindowExA
RegisterClassA
IsIconic
GetClientRect
InvalidateRect
FillRect
FrameRect
GetDesktopWindow
GetWindowRect
SendMessageA
gdi32
CreateRectRgn
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateEllipticRgn
CombineRgn
SetDIBitsToDevice
GetStockObject
CreateSolidBrush
DeleteObject
CreateCompatibleDC
CreateDIBSection
BitBlt
Polyline
comdlg32
GetSaveFileNameA
PageSetupDlgA
GetOpenFileNameA
ole32
GetHGlobalFromStream
OleIsCurrentClipboard
CoMarshalInterface
CreateStreamOnHGlobal
OleDraw
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleSetClipboard
CoMarshalInterThreadInterfaceInStream
OleFlushClipboard
OleUninitialize
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayPutElement
SafeArrayCreate
OleLoadPicture
SysAllocStringLen
SafeArrayDestroy
ws2_32
WSAStringToAddressA
version
GetFileVersionInfoSizeA
shlwapi
StrSpnA
gdiplus
GdipFree
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipSaveImageToFile
GdipDisposeImage
GdipLoadImageFromFile
GdipAlloc
imm32
ImmSetConversionStatus
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmAssociateContext
ImmCreateContext
ImmGetContext
ImmReleaseContext
xmllite
CreateXmlReaderInputWithEncodingName
Sections
.text Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ