Static task
static1
Behavioral task
behavioral1
Sample
9e83026f220b8c8d6178ceb235513093_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9e83026f220b8c8d6178ceb235513093_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9e83026f220b8c8d6178ceb235513093_JaffaCakes118
-
Size
2.8MB
-
MD5
9e83026f220b8c8d6178ceb235513093
-
SHA1
0db46b42ee86db5eb00b0a6fbe8e087b36200d08
-
SHA256
2e70742b4ebcab98eff6c5219363b1c81b93fdb6b37d3d51e0900bcb363b36bd
-
SHA512
0368f6a02d01282a832f820ca8c7f783a840dbb50ba083877c6bb72cc0dd5f62ad98f6f64c88972dbb1abb9f71786a326c0215f43a037a9becf26369417ae58d
-
SSDEEP
24576:WajQjq74XFH1sT8GhaSRghxA0OSGt6d5j+:WUP6hIaSRIA0hGuj+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e83026f220b8c8d6178ceb235513093_JaffaCakes118
Files
-
9e83026f220b8c8d6178ceb235513093_JaffaCakes118.exe windows:5 windows x86 arch:x86
a221133b31e947fffaf0ebd767a91afd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AnimateWindow
PeekMessageW
PackDDElParam
CheckRadioButton
DdeGetData
DrawFrameControl
GetRawInputBuffer
GetIconInfo
DestroyIcon
GetTopWindow
IsRectEmpty
InvertRect
BeginPaint
DrawTextW
GetMenuItemCount
GetMenuItemID
CreatePopupMenu
DrawMenuBar
GetMenuState
TranslateAcceleratorW
MsgWaitForMultipleObjectsEx
GetKeyboardType
advapi32
RegQueryValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
opengl32
glGetFloatv
glClear
glClearColor
glCopyTexSubImage2D
glTexParameteri
glStencilOp
glStencilMask
glIsEnabled
glGetIntegerv
glBlendFunc
glGetError
glGenTextures
glFlush
glDrawElements
glDrawArrays
userenv
GetUserProfileDirectoryW
LeaveCriticalPolicySection
LoadUserProfileW
kernel32
FlushFileBuffers
LCMapStringW
HeapSize
GetConsoleCP
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
HeapReAlloc
GetConsoleWindow
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
LocalAlloc
VirtualAlloc
GetBinaryTypeW
GetCurrentThreadId
GetProcessId
GetLastError
WaitForMultipleObjects
GetFileSize
SetEndOfFile
GetSystemInfo
LoadLibraryW
GetModuleHandleW
CreateProcessW
GetCommandLineW
BindIoCompletionCallback
MultiByteToWideChar
GetLocaleInfoW
GetUserDefaultLCID
EnumLanguageGroupLocalesW
CreateFileW
RaiseException
EncodePointer
SetLastError
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 949KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.7eses0 Size: 569KB - Virtual size: 568KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ule10 Size: 576KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wwdy90 Size: 349KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ