Pi
Static task
static1
Behavioral task
behavioral1
Sample
97dc361934388d33b6415270f0c9fb0b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
97dc361934388d33b6415270f0c9fb0b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
97dc361934388d33b6415270f0c9fb0b_JaffaCakes118
-
Size
608KB
-
MD5
97dc361934388d33b6415270f0c9fb0b
-
SHA1
cf3c21404cdf17038cbb07187bc777a71f6475ae
-
SHA256
fb239b742eb27458418ef2b4747affba5b2c5460291fe954e3227aaf6053cf60
-
SHA512
432c18944e88df7aeae606f3e0c8cf7156f0ff1315edd207f3c225482cd0cf9b35980b5db1f986b88ce279de41faaa7fc1911f738368c60e97a0db11cd33eee1
-
SSDEEP
12288:fs/aUgxxeAf9xTvMjlqtxoO7sVUgnhGI9hym7rEoqNEmYB2:k/aUeNc6xanh9hyEEvC0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 97dc361934388d33b6415270f0c9fb0b_JaffaCakes118
Files
-
97dc361934388d33b6415270f0c9fb0b_JaffaCakes118.exe windows:5 windows x86 arch:x86
ce8b6f2b4765b5141134c768fd494a72
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
Imports
kernel32
IsValidLocale
GetLocaleInfoA
GetStringTypeW
SetFilePointer
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetHandleCount
LoadLibraryW
ExitProcess
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
WriteFile
GetStdHandle
HeapFree
HeapQueryInformation
HeapSize
HeapReAlloc
GetModuleFileNameA
HeapAlloc
SetLastError
GetModuleHandleW
TlsFree
GetCurrentThreadId
TlsSetValue
TlsGetValue
TlsAlloc
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
SetStdHandle
CreateFileW
SetEndOfFile
GlobalFree
GetProfileStringA
GetWindowsDirectoryA
SetCurrentDirectoryA
GetConsoleTitleA
SetConsoleTitleA
Sleep
lstrcmpA
CreateDirectoryA
FindFirstFileA
lstrcpyA
lstrcatA
CopyFileA
GetFileAttributesA
SetFileAttributesA
FindNextFileA
GetLastError
FindClose
CreateFileA
DeviceIoControl
CloseHandle
HeapCreate
SystemTimeToFileTime
LocalFileTimeToFileTime
GetProcAddress
IsValidCodePage
GetOEMCP
GetACP
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
CreateIoCompletionPort
GetSystemInfo
CreateThread
GlobalAlloc
GetLongPathNameW
GetQueuedCompletionStatus
GetCPInfo
MultiByteToWideChar
LCMapStringW
GetStartupInfoW
HeapSetInformation
GetCommandLineA
WideCharToMultiByte
RtlUnwind
RaiseException
GetModuleFileNameW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetProcessHeap
TerminateProcess
IsBadReadPtr
HeapValidate
DecodePointer
EncodePointer
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetEnvironmentStringsW
lstrlenA
GetModuleHandleA
LoadLibraryA
user32
InflateRect
SetWindowTextA
CreatePopupMenu
GetCursorPos
GetDlgItem
GetWindowLongA
EnumWindowStationsW
wsprintfA
MessageBoxA
SendMessageA
GetIconInfo
GetSysColor
EndDialog
DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
EnumDisplayDevicesA
GetWindowRect
CreateDialogParamA
SetWindowPos
InsertMenuItemA
GetSystemMetrics
GetDesktopWindow
CreateWindowExA
PostQuitMessage
MoveWindow
EndPaint
DrawTextA
ReleaseDC
FindWindowA
GetWindowTextA
CallWindowProcA
DefWindowProcA
GetDC
BeginPaint
GetClientRect
FillRect
LoadIconA
DrawIcon
DestroyIcon
DestroyWindow
ShowWindow
gdi32
Ellipse
GetObjectA
CreateMetaFileA
SetMapMode
SetWindowExtEx
SetWindowOrgEx
CreateFontIndirectA
SelectObject
ExtTextOutA
MoveToEx
LineTo
DeleteObject
CloseMetaFile
DeleteMetaFile
StartDocA
StartPage
Escape
EndPage
EndDoc
CreateDCA
CreateDIBSection
CreateCompatibleDC
DeleteDC
CreatePen
Pie
Chord
CancelDC
CreateSolidBrush
CreateFontA
GetStockObject
GetTextMetricsA
SetTextColor
SetPixelFormat
GetDeviceCaps
FillRgn
BitBlt
winspool.drv
GetPrinterA
ClosePrinter
OpenPrinterA
EnumPrintersA
EnumJobsA
comdlg32
FindTextW
advapi32
RegSetValueExA
RegCreateKeyExA
RegCloseKey
shell32
SHGetMalloc
SHGetFolderLocation
SHGetFolderPathA
SHGetDesktopFolder
ole32
CoUninitialize
CoCreateInstance
CoInitialize
StringFromGUID2
CoCreateGuid
odbc32
ord39
ord72
ord19
ord7
ord12
ord75
ord24
ws2_32
WSAGetLastError
WSALookupServiceBeginA
WSAStartup
WSALookupServiceEnd
WSALookupServiceNextA
WSASend
WSAAccept
listen
htons
htonl
WSASocketA
inet_addr
closesocket
getsockopt
bind
socket
WSACleanup
msacm32
acmStreamOpen
acmStreamPrepareHeader
acmStreamClose
iphlpapi
SendARP
shlwapi
StrRetToBufA
PathFindFileNameA
PathRemoveFileSpecA
PathStripToRootA
PathAppendA
PathFileExistsA
PathFindExtensionA
PathCompactPathA
comctl32
ord413
ord17
opengl32
glClearColor
glClear
setupapi
SetupDiOpenDeviceInfoA
SetupDiCreateDeviceInfoA
SetupGetStringFieldA
SetupOpenInfFileA
SetupOpenAppendInfFileA
SetupInitDefaultQueueCallback
SetupDiRegisterDeviceInfo
SetupFindFirstLineA
SetupDiCreateDeviceInfoList
SetupDefaultQueueCallbackA
SetupDiDestroyDeviceInfoList
SetupCloseInfFile
SetupGetIntField
SetupDiDestroyDriverInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyA
SetupDiInstallDevice
SetupDiSetSelectedDriverA
SetupDiBuildDriverInfoList
SetupDiSetDeviceInstallParamsA
SetupDiGetDeviceInstallParamsA
SetupInstallFromInfSectionA
Exports
Exports
Sections
.text Size: 405KB - Virtual size: 405KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ