Static task
static1
Behavioral task
behavioral1
Sample
afe7a934e980e0607811cd10fe30aa4f_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
afe7a934e980e0607811cd10fe30aa4f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
afe7a934e980e0607811cd10fe30aa4f_JaffaCakes118
-
Size
2.3MB
-
MD5
afe7a934e980e0607811cd10fe30aa4f
-
SHA1
4277050370d994d2f9fe41c76b446414ac636e12
-
SHA256
0c65ff7df457ba6f36f1b37be3e9b26044a93b76ad54f17bc41b856c30c31607
-
SHA512
5df5d0dbd793d973216085f837b88f4d3694353f1e049f501a6f46baf5d62d6b42e31025af84d86c8977fa06de24db9ebfc76d3e42c0d89a7c31c4d00d6861b3
-
SSDEEP
24576:iIG+buy3s1+L7O3vLO2zQEpRJ1hh5/U4GJiU:iIG+r0AUvLObEF/1GJiU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afe7a934e980e0607811cd10fe30aa4f_JaffaCakes118
Files
-
afe7a934e980e0607811cd10fe30aa4f_JaffaCakes118.exe windows:5 windows x86 arch:x86
390f14c088eb88d3a43a044547f8f4c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawEdge
GetMessageW
DdeUnaccessData
GetComboBoxInfo
SystemParametersInfoW
SetScrollInfo
IsDialogMessageW
GetTopWindow
GetWindowLongW
DrawFocusRect
ChildWindowFromPoint
AdjustWindowRectEx
GetWindowRect
EnumPropsExW
LockWindowUpdate
SetActiveWindow
GetMenuItemInfoW
CreateMenu
GetMenu
LoadAcceleratorsW
SetTimer
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
DialogBoxParamW
SetWindowPos
IsWindow
CreateWindowExW
GetClassInfoW
UnregisterClassW
DefWindowProcW
ExitWindowsEx
RegisterWindowMessageW
advapi32
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
OpenSCManagerW
RegDeleteValueW
urlmon
CoInternetCreateSecurityManager
comctl32
ImageList_GetDragImage
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Read
ImageList_SetBkColor
ImageList_GetImageCount
InitCommonControlsEx
CreatePropertySheetPageW
CreateToolbarEx
_TrackMouseEvent
FlatSB_SetScrollInfo
FlatSB_SetScrollProp
ImageList_Copy
InitializeFlatSB
mpr
WNetGetResourceInformationW
WNetEnumResourceW
psapi
EnumDeviceDrivers
kernel32
RtlUnwind
LoadLibraryExW
HeapFree
OutputDebugStringW
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
HeapAlloc
HeapReAlloc
HeapSize
IsDebuggerPresent
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
LeaveCriticalSection
IsBadStringPtrW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetVersion
GlobalAlloc
VirtualAlloc
ReleaseSemaphore
SetFilePointer
GetFileTime
lstrcmpW
CreateEventW
GetModuleHandleW
GetCommandLineW
GetPrivateProfileIntW
GetFileAttributesW
DeleteFileW
FindFirstFileW
GetVersionExW
MultiByteToWideChar
GetThreadLocale
GetConsoleWindow
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 936KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.st7i Size: 249KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.toeo Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ce31 Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.4o3wa7 Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 365KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ