Static task
static1
Behavioral task
behavioral1
Sample
56574c4691f454ea2c19454b7fc40905_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
56574c4691f454ea2c19454b7fc40905_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
56574c4691f454ea2c19454b7fc40905_JaffaCakes118
-
Size
616KB
-
MD5
56574c4691f454ea2c19454b7fc40905
-
SHA1
cbbfd3d72456c071ceef8ff4bf84106ca1062c6f
-
SHA256
210223de4b6b3fb33d879ffb7df1e6b6cc7223f24603b2296852066ee3db3f43
-
SHA512
81f0de49b8e96d6422fb0f92f0799cac469d840b35e5f1ff48f9b2ae56104983ab4a17633def840868cd3c5db7b729d2f72d9f65590dfa0efcc95ba0b8980cdb
-
SSDEEP
12288:5v/fMH3Mu7vOlM7CjCkczgmziP+1RTwu7vOlM7CjCkczg:5v/fMfvQjCM+3vQj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 56574c4691f454ea2c19454b7fc40905_JaffaCakes118
Files
-
56574c4691f454ea2c19454b7fc40905_JaffaCakes118.exe windows:4 windows x86 arch:x86
69e7e70d34ec8d4b68309bf960707061
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasDialA
RasEnumDevicesA
advapi32
GetSecurityDescriptorSacl
msvcrt
_controlfp
_mbsncoll
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_inp
_isctype
sqrt
_onexit
__dllonexit
ldexp
_kbhit
_setmbcp
user32
TrackPopupMenu
EnableScrollBar
InvalidateRect
CreateDialogIndirectParamW
MapDialogRect
LoadBitmapA
DrawFrameControl
BlockInput
DestroyAcceleratorTable
CallWindowProcA
IsWindowVisible
DdeAccessData
BringWindowToTop
GetClipboardViewer
CreateDialogParamA
SetCaretBlinkTime
SetPropA
CreateIconFromResource
SetWindowPos
DrawCaption
GetQueueStatus
ValidateRect
SetMenuDefaultItem
GetMenu
FindWindowW
IsIconic
GetMessageW
OemToCharBuffA
KillTimer
SendDlgItemMessageA
DrawStateW
CloseWindow
AttachThreadInput
ReuseDDElParam
ReleaseDC
EnableWindow
DragDetect
RemoveMenu
MapVirtualKeyW
CharUpperW
ChangeDisplaySettingsW
RemovePropA
CopyIcon
InsertMenuW
SetClipboardData
WaitMessage
FillRect
UnionRect
GetUserObjectInformationW
GetKeyboardLayoutNameW
CreateCursor
LoadCursorFromFileW
WindowFromDC
GetScrollInfo
IntersectRect
CreateWindowStationW
CharLowerW
GetDlgItemTextW
GrayStringA
FindWindowA
CharToOemBuffA
RegisterClipboardFormatW
ChangeDisplaySettingsA
EnumThreadWindows
LoadImageA
GetDC
TranslateMDISysAccel
ClientToScreen
GetPropA
GetMenuItemCount
ScrollWindow
GetKeyNameTextW
DefWindowProcA
CreateDialogIndirectParamA
ChildWindowFromPointEx
LoadMenuW
DefDlgProcA
GetMenuItemRect
EmptyClipboard
DialogBoxIndirectParamA
ToAsciiEx
GetSysColorBrush
LoadKeyboardLayoutW
GetClassInfoA
MoveWindow
IsChild
IsCharLowerA
MessageBoxA
CloseDesktop
GetSysColor
IsCharAlphaNumericA
GetOpenClipboardWindow
GetWindowLongA
GetWindowRect
SetCapture
GetCapture
DrawTextW
GetSystemMetrics
PtInRect
GetWindowModuleFileNameA
LoadMenuA
ToAscii
GetScrollPos
PaintDesktop
FlashWindow
ScrollWindowEx
PostQuitMessage
VkKeyScanExW
SystemParametersInfoA
GetGUIThreadInfo
GetWindowThreadProcessId
DispatchMessageA
CharNextA
PostThreadMessageW
GetKeyState
SetMenu
FrameRect
MessageBeep
SetWinEventHook
CallMsgFilterA
SendNotifyMessageW
SetCursor
GetDlgCtrlID
TranslateAcceleratorA
GetWindowWord
FindWindowExA
ShowCaret
CharPrevW
RegisterClassExW
PostThreadMessageA
BeginDeferWindowPos
ShowOwnedPopups
CharLowerA
GetMessageExtraInfo
DrawTextExA
GetDlgItemInt
SetKeyboardState
GetProcessWindowStation
SendInput
SetScrollPos
SendDlgItemMessageW
GetWindowTextLengthA
PostMessageA
LoadStringW
IsCharUpperA
SetWindowLongW
DdeConnect
SetDlgItemInt
DrawAnimatedRects
CloseClipboard
OpenClipboard
LockWindowUpdate
GetDlgItem
UnhookWinEvent
LoadAcceleratorsA
GetForegroundWindow
CharToOemA
CharPrevA
MapVirtualKeyExA
GetMessageA
DdeQueryStringA
DialogBoxParamA
BeginPaint
SetTimer
AdjustWindowRect
GetClipboardFormatNameW
OffsetRect
PostMessageW
WinHelpW
VkKeyScanW
EnumDisplaySettingsW
WinHelpA
CharNextW
GetClipCursor
SetActiveWindow
LoadIconA
SetCaretPos
GetClassInfoW
SystemParametersInfoW
DefDlgProcW
CharUpperA
IsCharAlphaW
wvsprintfA
CreateWindowExW
CharUpperBuffW
SetWindowTextW
IsDialogMessageA
EnumClipboardFormats
GetKeyboardLayoutList
ModifyMenuW
DispatchMessageW
ShowCursor
GetCursor
CopyAcceleratorTableW
WindowFromPoint
DestroyCaret
SetWindowPlacement
UnpackDDElParam
ValidateRgn
GetMenuItemID
GetClassInfoExW
GetDoubleClickTime
GetParent
GetWindowLongW
GetCaretPos
DefFrameProcW
GetTabbedTextExtentA
GetKeyboardState
LoadCursorFromFileA
DdeFreeStringHandle
GetScrollRange
GetNextDlgTabItem
RegisterClipboardFormatA
ScreenToClient
InvalidateRgn
MessageBoxExW
CheckMenuItem
SetRectEmpty
IsWindowEnabled
PeekMessageW
LoadBitmapW
IsDlgButtonChecked
DrawIconEx
CreatePopupMenu
keybd_event
GetLastActivePopup
PackDDElParam
SetWindowTextA
SetFocus
DeferWindowPos
MapVirtualKeyExW
DestroyMenu
GetWindowTextA
SetClassLongW
DdeClientTransaction
GetDlgItemTextA
GetKeyboardLayout
LoadCursorA
mfc42
ord2554
ord1035
ord5731
ord3922
ord1089
ord1000
ord2396
ord3346
ord4486
ord5302
ord2725
ord1048
ord4698
ord5307
ord1084
ord5714
ord2982
ord1023
ord3259
ord6375
ord1086
ord1576
ord1000
ord1168
ord4234
ord324
ord641
ord1090
ord4425
ord4627
ord1047
ord1007
ord1016
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord1056
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord1045
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord815
ord561
ord3738
ord4424
ord1013
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord1072
ord4465
ord4274
kernel32
GetStartupInfoA
GetModuleHandleA
Sections
.text Size: 364KB - Virtual size: 361KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ