Static task
static1
Behavioral task
behavioral1
Sample
724ced7ebb97b307b7c6fd090403603c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
724ced7ebb97b307b7c6fd090403603c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
724ced7ebb97b307b7c6fd090403603c_JaffaCakes118
-
Size
2.2MB
-
MD5
724ced7ebb97b307b7c6fd090403603c
-
SHA1
c247a034c7d6ab34162182aec112ec5cdb3209cf
-
SHA256
adb082f4338725480107a71e54990e5ca161662a69bd463962af8adb53603b98
-
SHA512
dcb0b7acee35a0954691a7aa69792be3a9358cde10dc259d0e4eb5a7f572ae2c23d43cafca53d070395d56d263444009c012f45cc12f526111a02be4ad7132c5
-
SSDEEP
24576:I5Idldm0k5v7dNz0zJTf3DzNMANampsVHk/YO0tA2bLF82:I5Ild9GgpNMA/sVEc82
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 724ced7ebb97b307b7c6fd090403603c_JaffaCakes118
Files
-
724ced7ebb97b307b7c6fd090403603c_JaffaCakes118.exe windows:5 windows x86 arch:x86
3230d774a3b008950c912b2936594029
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowsHookExW
IntersectRect
GetSysColor
WindowFromPoint
GetCursorPos
GetClientRect
RemovePropW
ShowScrollBar
ValidateRect
SetForegroundWindow
SetMenuDefaultItem
LoadImageW
DeleteMenu
RemoveMenu
CheckMenuItem
GetMenuState
SetMenu
LoadMenuW
EnableWindow
SendMessageTimeoutW
IsIconic
DialogBoxParamW
GetDlgItem
IsDialogMessageW
MapDialogRect
DdeDisconnectList
GetMenuItemInfoW
IsDlgButtonChecked
DrawCaption
kernel32
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapReAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
GetVersion
GlobalAlloc
LocalAlloc
VirtualAlloc
HeapAlloc
HeapSize
InitAtomTable
GetCommState
SetCommState
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FileTimeToLocalFileTime
TransactNamedPipe
lstrcmpiW
CreateMutexW
LoadLibraryW
ExpandEnvironmentStringsW
FindNextFileW
BindIoCompletionCallback
QueryPerformanceFrequency
GetConsoleWindow
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
HeapFree
userenv
UnregisterGPNotification
LeaveCriticalPolicySection
LoadUserProfileW
mprapi
MprConfigInterfaceCreate
MprConfigBufferFree
MprConfigServerDisconnect
MprConfigInterfaceTransportEnum
wininet
InternetCrackUrlW
advapi32
OpenSCManagerW
RegSetValueExW
RegEnumValueW
RegCreateKeyExW
RegCloseKey
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 334KB - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.9e6ig Size: 193KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1el61 Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pi41ir Size: 511KB - Virtual size: 510KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.219293 Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ