Static task
static1
Behavioral task
behavioral1
Sample
ac22b82a83d704c96b7fee55c6257458_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ac22b82a83d704c96b7fee55c6257458_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
ac22b82a83d704c96b7fee55c6257458_JaffaCakes118
-
Size
319KB
-
MD5
ac22b82a83d704c96b7fee55c6257458
-
SHA1
a85632fde3a016b9348a4a5763c12ac3f1331d1e
-
SHA256
4d56dcc1364137b2e2c1e2b566ff9497788293bda51c25517204211679abdd55
-
SHA512
bfc9593a3a3e4f44c03d9b2a390ba0f07d8f9fdc330a127c1e1e8cac263e4697e4401fd7673189b8b2a371f311d6b843c96ed9b16af112e41cd82a52c32dc4b1
-
SSDEEP
6144:6FmHmyjjY0G/SP/rpGDfz6DfM8jC1lZF/c6jiuG05dxr1gUDrVBPN:9ZsDqzp8fz6bMQCDZ/j3SYPN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac22b82a83d704c96b7fee55c6257458_JaffaCakes118
Files
-
ac22b82a83d704c96b7fee55c6257458_JaffaCakes118.exe windows:5 windows x86 arch:x86
534df664a2fd9b712012f8ee58489a5d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuA
AppendMenuW
BringWindowToTop
CallWindowProcA
CheckDlgButton
CheckMenuItem
ClientToScreen
CreateDialogParamW
CreatePopupMenu
DestroyMenu
DestroyWindow
DialogBoxParamW
EnableWindow
EndDialog
EnumWindows
FindWindowExA
GetCapture
GetClassLongA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetDlgItemTextW
GetForegroundWindow
GetProcessWindowStation
GetScrollPos
GetScrollRange
GetUserObjectInformationW
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowTextW
GetWindowThreadProcessId
InsertMenuA
InsertMenuW
InvalidateRect
InvertRect
IsDlgButtonChecked
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorA
LoadIconA
MessageBoxA
MessageBoxW
MoveWindow
PostMessageA
RedrawWindow
RegisterHotKey
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageA
SendMessageW
SetCapture
SetClassLongA
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetScrollPos
SetScrollRange
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowScrollBar
ShowWindow
TrackPopupMenu
UnregisterHotKey
WindowFromPoint
GetParent
IsIconic
comctl32
ord17
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
FlushFileBuffers
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
RaiseException
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
CreateFileA
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
WriteFile
ExitProcess
Sleep
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetTimeZoneInformation
WideCharToMultiByte
GetModuleHandleA
InterlockedDecrement
GetLastError
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
GetStartupInfoA
GetTickCount
GetSystemTimeAsFileTime
GetCommandLineA
Sections
.reloc Size: 512B - Virtual size: 21B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g-data Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.soska Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ