Static task
static1
Behavioral task
behavioral1
Sample
868e0c87faa8c1e099d1cc3d8929c4f3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
868e0c87faa8c1e099d1cc3d8929c4f3_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
868e0c87faa8c1e099d1cc3d8929c4f3_JaffaCakes118
-
Size
300KB
-
MD5
868e0c87faa8c1e099d1cc3d8929c4f3
-
SHA1
15025278945ba2f4e6a94d10b059520aef46e05c
-
SHA256
e42e9d75edc89e727602fa464f83d595559dc97d72afa6f3ee3848225c5e01e6
-
SHA512
7862b9c2bea1f60c8d61b9a0bb51a418b45a77caf8e21c271a9fd37b15de91287b78b08c988c9e1404a9c9f4ab89b6c29fd92df0a6cecd7a3ea3660579ef8038
-
SSDEEP
6144:pf0JqTsDBjpjbqrhJ2iqQ9qMpmnIYSAY4YTTrpqjCGWcGSnY5rQq:0Ljmrf2iqQRMIJAYVTrcjCGLnYv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 868e0c87faa8c1e099d1cc3d8929c4f3_JaffaCakes118
Files
-
868e0c87faa8c1e099d1cc3d8929c4f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
624b5c2dfbb3d461bbe2e894c345712b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetCurrentProcessId
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
FileTimeToSystemTime
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
CreateFileA
FileTimeToLocalFileTime
GetTickCount
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
GetTimeZoneInformation
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetStringTypeA
GetStringTypeW
SetHandleCount
SetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
lstrcmpA
GlobalReAlloc
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleHandleA
SetLastError
GlobalFree
FormatMessageA
LocalFree
MulDiv
CloseHandle
ExitProcess
Sleep
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
InterlockedExchange
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcAddress
GetLastError
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
WinExec
lstrcpyA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
GlobalHandle
SizeofResource
user32
RegisterClipboardFormatA
SetWindowsHookExA
CallNextHookEx
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
SetForegroundWindow
IsWindowVisible
GetMenu
PostMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
DefWindowProcA
CallWindowProcA
IsIconic
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
IsWindowEnabled
ShowWindow
GetDlgCtrlID
SetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetWindow
GetSystemMetrics
SystemParametersInfoA
DestroyMenu
CopyRect
EndPaint
BeginPaint
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetCapture
SendMessageA
InvalidateRect
GetParent
EnableWindow
GetCursorPos
SetCursor
PtInRect
UnregisterClassA
FillRect
GetSysColorBrush
PostQuitMessage
InflateRect
GetWindowRect
GetClientRect
GetDC
ReleaseDC
RedrawWindow
SetCapture
ReleaseCapture
IsWindow
GetSysColor
MessageBeep
CopyIcon
LoadCursorA
SetWindowLongA
LoadBitmapA
LoadIconA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetKeyState
UpdateWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
WindowFromPoint
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetDesktopWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
WinHelpA
GetClassLongA
gdi32
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetMapMode
GetClipBox
DeleteObject
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetStockObject
CreateFontIndirectA
GetObjectA
GetTextExtentPoint32A
CreateCompatibleDC
BitBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetTextColor
GetDeviceCaps
advapi32
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyA
shell32
ShellExecuteA
oleaut32
VariantInit
VariantChangeType
VariantClear
shlwapi
PathFindExtensionA
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
Sections
.text Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ