Static task
static1
Behavioral task
behavioral1
Sample
898ec3c8fcded2fb73012f8ae89440ca_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
898ec3c8fcded2fb73012f8ae89440ca_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
898ec3c8fcded2fb73012f8ae89440ca_JaffaCakes118
-
Size
1.2MB
-
MD5
898ec3c8fcded2fb73012f8ae89440ca
-
SHA1
785056387202206b5a244a929276f2b8e4509849
-
SHA256
13b4aed0ca5ce651224a1177eac3b1e5a935b33e3d0449aed4af4c10f1627edc
-
SHA512
5d3724d62b9f3e33fe5de7513d501010a9e275f00999319303004ce767771a99ef1cb80b367d068303e4a6d490f48946b2822242e4b8f46785b413efde34a5fb
-
SSDEEP
24576:RLXF67aJeOHuS2Qys0xVmQ8RKSH9jgAKU3bFkVL0W:7OsJU44mFRKSZJFM0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 898ec3c8fcded2fb73012f8ae89440ca_JaffaCakes118
Files
-
898ec3c8fcded2fb73012f8ae89440ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
a6109eb9dd457e7e60c4d207fab56591
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_AddMasked
ImageList_Destroy
ImageList_Draw
ImageList_GetIconSize
ImageList_LoadImageW
ImageList_SetBkColor
ImageList_SetOverlayImage
InitCommonControlsEx
ImageList_Create
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
GetFullPathNameW
GetLastError
GetLogicalDrives
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetShortPathNameW
GetStartupInfoW
GetSystemInfo
GetTempPathW
GetTickCount
GetVersionExW
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryW
LoadResource
LocalFree
LockResource
lstrcatW
lstrcpynW
lstrcpyW
GetFileSize
lstrlenW
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
PeekNamedPipe
QueryPerformanceFrequency
RaiseException
ReadFile
SetErrorMode
SetEvent
SetLastError
SetPriorityClass
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
CreateToolhelp32Snapshot
Process32NextW
GetModuleHandleW
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetFileAttributesW
GetExitCodeProcess
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
FormatMessageW
FlushInstructionCache
FindResourceW
FindResourceExW
FindNextFileW
FindFirstFileW
FindClose
EnterCriticalSection
DuplicateHandle
DeviceIoControl
DeleteFileW
GetVersionExA
HeapCreate
GetCPInfo
DeleteFileA
DeleteCriticalSection
CreateProcessW
CreatePipe
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CloseHandle
ExitProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetVersion
LoadLibraryA
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
LCMapStringA
lstrlenA
LCMapStringW
user32
OffsetRect
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
PtInRect
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageW
SetCapture
SetClassLongW
SetCursor
SetFocus
SetMenuItemBitmaps
SetRect
SetTimer
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
UnregisterClassA
UpdateWindow
wsprintfW
wvsprintfW
KillTimer
IsZoomed
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsClipboardFormatAvailable
InvalidateRect
InsertMenuW
InflateRect
MoveWindow
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetParent
GetMenuItemCount
GetKeyState
GetIconInfo
GetDoubleClickTime
GetDlgItem
GetDlgCtrlID
GetDC
GetClipboardData
GetClientRect
GetClassLongW
GetCapture
GetActiveWindow
FillRect
ExitWindowsEx
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawIconEx
DrawEdge
DispatchMessageW
DialogBoxParamW
DestroyWindow
MessageBoxW
MessageBeep
MapWindowPoints
LoadStringW
LoadMenuW
DestroyMenu
DeleteMenu
DefWindowProcW
CreateWindowExW
CopyRect
CloseClipboard
ClientToScreen
CheckMenuItem
CharNextW
LoadCursorW
GetWindowRect
LoadBitmapW
CharLowerBuffW
CallWindowProcW
BeginPaint
AdjustWindowRectEx
DrawFocusRect
gdi32
SelectPalette
SetBkMode
SetTextColor
SelectObject
CreateFontW
CreateDIBSection
RealizePalette
CreateSolidBrush
GetStockObject
GetObjectW
GetDIBits
GetDeviceCaps
GetBkColor
DeleteObject
Rectangle
DeleteDC
CreateDCW
CreateCompatibleDC
GetTextColor
BitBlt
CreateCompatibleBitmap
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExW
shell32
DragQueryFileW
SHGetFileInfoW
ShellExecuteW
DragAcceptFiles
ole32
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize
OleInitialize
OleUninitialize
RegisterDragDrop
StringFromCLSID
shlwapi
PathFileExistsA
PathFileExistsW
Sections
.text Size: 443KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 14.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rch0 Size: 648KB - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ