MGNZbcBn
Static task
static1
Behavioral task
behavioral1
Sample
87d0f9f75c64b343e508f513f2e2009e_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
87d0f9f75c64b343e508f513f2e2009e_JaffaCakes118
-
Size
408KB
-
MD5
87d0f9f75c64b343e508f513f2e2009e
-
SHA1
f89ce9469b481e584bf5e3ff11e3bab96d43a378
-
SHA256
4ec4e52602e8b216dcb813949defd03e41da37fc420667222f5fb196d3817f0e
-
SHA512
a2b2f1a83668c539d511cefb72bd628d94a3ba359cffdeac226b3de393ca5722ace56068e160d34e528461a35ac2c5e69d1433c6a730df2e61d74d748af02e0c
-
SSDEEP
6144:TNR0d2gxGROufuE9rfdtpZxBkaSUKZpLxml3T++vVVjv92svWaqYGgbHJ:Ud2wGVuO17G0KZK1BXj9UQGC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87d0f9f75c64b343e508f513f2e2009e_JaffaCakes118
Files
-
87d0f9f75c64b343e508f513f2e2009e_JaffaCakes118.exe windows:4 windows x86 arch:x86
cddc9b1648f69fff68c23d44b9c7e1a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
HeapReAlloc
InterlockedExchange
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
SetErrorMode
GetCurrentDirectoryA
GetOEMCP
GetCPInfo
lstrcpynW
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
SystemTimeToFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
CreateFileA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileA
MoveFileA
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
GlobalGetAtomNameA
GlobalAddAtomA
InterlockedIncrement
GetModuleFileNameA
InterlockedDecrement
SetLastError
GlobalFree
CopyFileA
MulDiv
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GetDiskFreeSpaceA
GetFullPathNameA
GetTempFileNameA
GetFileTime
SetFileTime
GetModuleHandleA
GetProcAddress
GetFileAttributesA
FindResourceA
LoadResource
LockResource
SizeofResource
GetStringTypeExA
CompareStringW
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
SetUnhandledExceptionFilter
user32
GetDCEx
LockWindowUpdate
DestroyIcon
PostThreadMessageA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
RegisterClipboardFormatA
GetMessageA
TranslateMessage
ValidateRect
ShowOwnedPopups
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
WindowFromPoint
KillTimer
SetTimer
SetParent
GetSystemMenu
GetCursorPos
LoadCursorA
DestroyCursor
SetCursorPos
SetCapture
RedrawWindow
ClientToScreen
InflateRect
IsZoomed
GetDC
ReleaseDC
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetScrollPos
GetScrollPos
SetForegroundWindow
ScreenToClient
DeferWindowPos
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
GetWindowPlacement
FindWindowA
RegisterWindowMessageA
LoadMenuA
DestroyMenu
GetClassNameA
WinHelpA
EqualRect
GetKeyState
GetMenu
UnpackDDElParam
ReuseDDElParam
LoadIconA
GetClassInfoA
SetCursor
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
InsertMenuItemA
CreatePopupMenu
OffsetRect
BringWindowToTop
SetMenu
GetDesktopWindow
GetWindow
TranslateAcceleratorA
IsChild
InvalidateRect
IsIconic
AdjustWindowRectEx
GetWindowTextLengthA
GetWindowTextA
SetWindowPos
SetFocus
ShowWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
CreateMenu
PeekMessageA
IsWindow
GetActiveWindow
CopyAcceleratorTableA
SendNotifyMessageA
PostMessageA
IntersectRect
SetRectEmpty
IsRectEmpty
IsClipboardFormatAvailable
wsprintfA
MessageBoxA
GetWindowLongA
GetMenuItemInfoA
GetLastActivePopup
IsWindowEnabled
SetMenuItemBitmaps
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
UnhookWindowsHookEx
GetMenuState
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
PtInRect
GrayStringA
AppendMenuA
GetMenuItemID
GetMenuItemCount
GetSubMenu
RemoveMenu
InSendMessage
IsWindowVisible
InsertMenuA
GetMenuStringA
DeleteMenu
GetSysColor
SystemParametersInfoA
DrawIcon
SetRect
CopyRect
UpdateWindow
GetSystemMetrics
LoadStringW
GetClientRect
EnableWindow
SendMessageA
CharUpperA
GetWindowRect
gdi32
SetWindowExtEx
ScaleWindowExtEx
CreatePatternBrush
CreateSolidBrush
CreateRectRgnIndirect
SetRectRgn
GetMapMode
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetBkColor
PatBlt
GetTextExtentPoint32A
GetTextMetricsA
CreateFontA
GetCharWidthA
DeleteObject
ScaleViewportExtEx
ExcludeClipRect
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetViewportExtEx
CreateRectRgn
SelectClipRgn
CombineRgn
CreateFontIndirectA
SelectObject
StretchDIBits
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
GetWindowExtEx
CreateBitmap
CreateDCA
CopyMetaFileA
GetDeviceCaps
GetStockObject
IntersectClipRect
comdlg32
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
GetFileTitleA
CommDlgExtendedError
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegQueryValueA
RegCreateKeyA
SetFileSecurityW
RegSetValueExA
RegCreateKeyExA
shell32
ExtractIconA
DragFinish
DragQueryFileA
SHGetFileInfoA
CommandLineToArgvW
comctl32
ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord1
ord3
ord7
ord5
ord8
ole32
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleLoad
OleGetIconOfClass
StgOpenStorageOnILockBytes
GetHGlobalFromILockBytes
OleRun
OleSetMenuDescriptor
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoDisconnectObject
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
OleDuplicateData
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateFileMoniker
CoTaskMemFree
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateBindCtx
OleSetContainedObject
OleLockRunning
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleSave
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromString
GetClassFile
CreateGenericComposite
CreateItemMoniker
oleaut32
VariantClear
SysAllocStringLen
VariantChangeType
VariantInit
Exports
Exports
Sections
.text Size: 232KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ