Static task
static1
Behavioral task
behavioral1
Sample
85a17dceb63a382120399b894f1469e5_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
85a17dceb63a382120399b894f1469e5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
85a17dceb63a382120399b894f1469e5_JaffaCakes118
-
Size
3.1MB
-
MD5
85a17dceb63a382120399b894f1469e5
-
SHA1
5fcf0fd48cb7335e10d400217470551c2e194dcc
-
SHA256
ed3bf447d26ad6df4c36783757590fd26af198fa222a4a40e7f136e9d0807a06
-
SHA512
a2294ede51099abb201fbab7647b1f01ae3e85acfb4f13f33c271186aed424c188e790503286e77f2a11a033b972a71ace190083882e31b57e8046bd09576dc0
-
SSDEEP
24576:MIo70mWun+YORdruLOgGL8CNV2NqONxljH28wAW5OTQ9:MIo7lWuY0gZV2PHivOTi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85a17dceb63a382120399b894f1469e5_JaffaCakes118
Files
-
85a17dceb63a382120399b894f1469e5_JaffaCakes118.exe windows:5 windows x86 arch:x86
80aa77f3798f96b23cef4620b8926dd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongW
GetWindowLongW
EqualRect
IsRectEmpty
OffsetRect
IntersectRect
CreateCaret
ScrollWindow
SetForegroundWindow
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemID
DestroyMenu
KillTimer
MsgWaitForMultipleObjects
ReleaseCapture
GetActiveWindow
SendDlgItemMessageW
GetDlgItem
EndDialog
MoveWindow
ShowOwnedPopups
ShowWindow
IsWindow
UnregisterClassW
DrawEdge
opengl32
glViewport
glTexParameteri
glTexImage2D
glStencilOp
glStencilMask
glStencilFunc
glReadPixels
glPixelStorei
glIsEnabled
glGetString
glGetFloatv
glGetError
glGenTextures
glFlush
glDrawElements
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glCopyTexSubImage2D
glColorMask
glClearDepth
glClearColor
glClear
glBlendFunc
glBindTexture
advapi32
RegEnumKeyExW
RegEnumValueW
RegCloseKey
kernel32
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetACP
IsValidCodePage
IsDebuggerPresent
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
DeleteCriticalSection
GetFileType
GetStdHandle
GetProcessHeap
WideCharToMultiByte
FlushFileBuffers
GetConsoleCP
GetConsoleMode
RtlUnwind
GlobalLock
LocalAlloc
VirtualAlloc
HeapDestroy
GetEnvironmentStringsW
GetCurrentThread
InitializeCriticalSection
InitAtomTable
SetEndOfFile
MulDiv
UnmapViewOfFile
CreateFileMappingW
LoadLibraryW
GetModuleHandleW
GetModuleHandleExW
GetStartupInfoW
FindResourceW
FindResourceExW
CreateFileW
AreFileApisANSI
GetOEMCP
GetCPInfo
GetLocaleInfoW
EnumUILanguagesW
GetConsoleWindow
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetProcAddress
MultiByteToWideChar
comdlg32
GetOpenFileNameW
ChooseColorW
FindTextW
PrintDlgW
PageSetupDlgW
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 909KB - Virtual size: 8.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fi89 Size: 455KB - Virtual size: 455KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.o587hr Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.631e Size: 780KB - Virtual size: 779KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.o27a Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ