Static task
static1
Behavioral task
behavioral1
Sample
806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118
-
Size
370KB
-
MD5
806942feeec8dce32e66ec7cfaf6afda
-
SHA1
677dcb1a31de1321afc58529f6f4b7bee0ad28b9
-
SHA256
5752529317e9cd84264d25ce1e30db01ab72afc542c8b0e567488cc543be8041
-
SHA512
ec5825ee92ab99e0edcfd582fc40ea4e415df879d2d94c049ce3810c27028cbadde844caf62b64bab7efc784c038fdf9ec637663fcd811534b906143748fe5aa
-
SSDEEP
6144:ut4o7sw5IkJyloTlYXlyiTBDirnvLYPsKiyWPh/:utnDIu5WVyiFinvLYPpWPp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118
Files
-
806942feeec8dce32e66ec7cfaf6afda_JaffaCakes118.exe windows:6 windows x86 arch:x86
0a1bce981e4607af5b58d8ef6016aaa1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
TlsGetValue
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetOEMCP
TlsSetValue
TlsFree
GetModuleHandleW
HeapSize
LoadLibraryExW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
GetEnvironmentStringsW
GetACP
IsValidCodePage
GetCurrentThreadId
SetLastError
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
GetModuleFileNameW
WriteFile
GetStdHandle
LCMapStringW
HeapReAlloc
FlushFileBuffers
SetStdHandle
WriteConsoleW
CloseHandle
GetTickCount
GlobalAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetProcAddress
GetLastError
HeapAlloc
HeapCreate
GetCPInfo
GetModuleHandleExW
ExitProcess
VirtualQuery
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
GetCommandLineA
RaiseException
HeapFree
RtlUnwind
LoadLibraryA
GetThreadLocale
FormatMessageA
CreateFileW
user32
GetCursorPos
CreatePopupMenu
SendMessageA
EndPaint
BeginPaint
CallWindowProcA
RemovePropA
DefWindowProcA
HideCaret
DrawIcon
OpenClipboard
EmptyClipboard
SetClipboardData
GetPropA
SetPropA
PostQuitMessage
CreateWindowExA
GetForegroundWindow
GetAsyncKeyState
SetScrollInfo
GetWindowRect
DialogBoxIndirectParamA
EnumWindowStationsW
InvalidateRect
GetWindowTextA
GetWindowTextLengthA
LoadBitmapA
GetDlgItem
GetWindow
GetParent
GetDesktopWindow
IsWindow
SetWindowLongA
GetDlgCtrlID
GetWindowLongA
GetClientRect
MessageBoxA
GetDialogBaseUnits
SetFocus
ReleaseDC
GetSysColor
GetDC
DrawFrameControl
SetScrollPos
BeginDeferWindowPos
CloseClipboard
gdi32
ExcludeClipRect
StretchDIBits
Polyline
CreateFontIndirectA
Rectangle
CreatePen
CreateDIBSection
CreateCompatibleDC
SetBkColor
SetTextColor
SetBkMode
SelectObject
GetStockObject
DeleteObject
FillRgn
CreateSolidBrush
shell32
ord245
ord239
ole32
OleCreateStaticFromData
OleDuplicateData
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
oleaut32
CreateErrorInfo
avifil32
AVIStreamRelease
AVIStreamOpenFromFileA
AVIStreamInfoA
AVIStreamWrite
AVIStreamSetFormat
AVIFileExit
AVIFileRelease
AVIFileInit
AVIStreamGetFrameClose
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamGetFrame
AVIStreamGetFrameOpen
msvfw32
DrawDibClose
shlwapi
StrToIntExA
comctl32
ImageList_GetImageCount
ImageList_Create
ImageList_AddMasked
pdh
PdhBrowseCountersA
secur32
AcquireCredentialsHandleW
InitializeSecurityContextW
AcceptSecurityContext
opengl32
glLoadIdentity
glMatrixMode
glViewport
winhttp
WinHttpSetTimeouts
WinHttpReadData
WinHttpReceiveResponse
WinHttpSetOption
WinHttpSendRequest
WinHttpSetCredentials
dxva2
GetNumberOfPhysicalMonitorsFromHMONITOR
Sections
.text Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 1024B - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 176KB - Virtual size: 951KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ