Static task
static1
Behavioral task
behavioral1
Sample
932f2a9223ad630b4549fa65c5a3a41f_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
932f2a9223ad630b4549fa65c5a3a41f_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
932f2a9223ad630b4549fa65c5a3a41f_JaffaCakes118
-
Size
2.2MB
-
MD5
932f2a9223ad630b4549fa65c5a3a41f
-
SHA1
fcf0e48346fedbaf6ec89a4bf8e9d29ddfbda3db
-
SHA256
22bd432b2ede645dc5af3575c5c411aa8812ad1231d0f476de3f09cfcb3d0731
-
SHA512
dbf00bd97068fa7f4b81e9147404eba86f6c22065a8c648e411360fd7ae17048283e35839fad42ff1f12575494c6c1f92117486e61396cddeb9c2a353d34a6be
-
SSDEEP
24576:thJfGL7Og0ChvFSDH6LhZ/A106MdseHspbH4BSS5d0YlFmypKp+JHQWqbXSPq2uc:cL7Og0CvU6d36Mds54ES39rW+Jw1lI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 932f2a9223ad630b4549fa65c5a3a41f_JaffaCakes118
Files
-
932f2a9223ad630b4549fa65c5a3a41f_JaffaCakes118.exe windows:4 windows x86 arch:x86
6b269b45ee3d60437fc205a2eaae93fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTokenInformation
RegDeleteKeyA
RegEnumKeyExA
GetSidSubAuthorityCount
CreateServiceW
RegNotifyChangeKeyValue
OpenProcessToken
AccessCheck
GetLengthSid
RegSetValueExA
RegSetKeySecurity
AllocateAndInitializeSid
RegSetValueExW
RegCloseKey
AdjustTokenPrivileges
CryptDestroyHash
RegEnumKeyA
RegOpenKeyExA
SetFileSecurityA
RegQueryValueExW
RegEnumKeyExW
comdlg32
GetOpenFileNameA
ChooseColorW
GetOpenFileNameW
kernel32
GetStdHandle
DisableThreadLibraryCalls
LCMapStringW
GetModuleHandleA
GetFileTime
Sleep
HeapReAlloc
QueryPerformanceCounter
GlobalAddAtomW
LeaveCriticalSection
lstrcmpW
SetUnhandledExceptionFilter
InterlockedCompareExchange
GetSystemTimeAsFileTime
LocalAlloc
ExpandEnvironmentStringsA
GlobalUnlock
DeleteCriticalSection
ExitProcess
TlsFree
GetDiskFreeSpaceA
SetLastError
GetFileAttributesW
GetVersionExW
GetFullPathNameA
GetConsoleMode
RaiseException
GetFileType
HeapFree
GetLastError
WritePrivateProfileStringA
GetUserDefaultLCID
CloseHandle
ReleaseSemaphore
VirtualQuery
VirtualAlloc
TlsAlloc
GetCurrentProcessId
MultiByteToWideChar
IsDebuggerPresent
GetVolumeInformationA
UnhandledExceptionFilter
SizeofResource
GetProcAddress
LockResource
IsBadCodePtr
SetFilePointer
GetModuleFileNameA
LoadLibraryW
InterlockedExchange
GetACP
ReadFile
ReadConsoleInputA
SetConsoleCtrlHandler
TlsGetValue
CreateEventA
TerminateProcess
GetCurrentThreadId
LoadLibraryA
oleaut32
SafeArrayPutElement
SafeArrayCreate
user32
ModifyMenuW
GetDlgCtrlID
DrawFrameControl
LoadStringW
DrawIcon
SetForegroundWindow
GetMenuItemID
LoadCursorW
BringWindowToTop
GetWindowThreadProcessId
GetSysColor
GetFocus
SetRect
GetClientRect
SendDlgItemMessageW
SendMessageW
GetWindowLongA
EqualRect
LoadMenuA
MapWindowPoints
PostMessageW
PeekMessageA
ScreenToClient
FindWindowExW
DefWindowProcW
SetWindowLongW
CharLowerA
RegisterDeviceNotificationW
AttachThreadInput
PtInRect
TrackPopupMenu
TranslateMessage
GetSystemMetrics
WaitMessage
PostThreadMessageW
GetSubMenu
DestroyCursor
GetWindowLongW
MessageBoxW
GetWindowDC
LoadCursorA
SetCapture
IsMenu
ShowWindow
SetWindowTextW
DispatchMessageW
MessageBeep
RedrawWindow
FillRect
GetDC
CreateDialogParamA
IsIconic
GetDlgItem
MoveWindow
GetMenu
HideCaret
GetWindow
CreateWindowExW
GetWindowRect
CharNextA
DestroyWindow
DialogBoxParamW
GetActiveWindow
CharUpperW
DeleteMenu
GetDesktopWindow
CheckDlgButton
InvalidateRect
EndPaint
EnableWindow
SetCursor
GetMenuState
AppendMenuW
PostQuitMessage
GetScrollRange
EnableMenuItem
ClientToScreen
GetCapture
ole32
StringFromGUID2
CoUnmarshalInterface
CoSetProxyBlanket
CoFileTimeNow
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoCreateGuid
Sections
.text Size: 200KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ