Static task
static1
Behavioral task
behavioral1
Sample
0122f9dce7e9554eef30c9d14e6a2762_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0122f9dce7e9554eef30c9d14e6a2762_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0122f9dce7e9554eef30c9d14e6a2762_JaffaCakes118
-
Size
605KB
-
MD5
0122f9dce7e9554eef30c9d14e6a2762
-
SHA1
6f45fc9979324424818fb07fad4f387e247dff57
-
SHA256
8b56e2f23aa270374d3970956c15c84e971de01467e143f1e23135e57e678be7
-
SHA512
35e580c4b4673f9e9c1f391706b827e6f57d95d2e8227cd84491225285ea3a94671a54ac2bd825db763c04bb9f806381e4b3c4f66e298b487d2f659ad071c5d6
-
SSDEEP
12288:PrPQ+eARva5pcUf4tVr7r6ivfp2qJoqd:PrP1eARmcUfmV72inMqJD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0122f9dce7e9554eef30c9d14e6a2762_JaffaCakes118
Files
-
0122f9dce7e9554eef30c9d14e6a2762_JaffaCakes118.exe windows:4 windows x86 arch:x86
558c04895982563728c354b2d36c6028
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
RegisterWindowMessageW
ShowWindowAsync
GetSystemMetrics
CharToOemA
EnumDisplaySettingsW
DefWindowProcW
SetMenuItemInfoA
GetMenuItemCount
CharPrevExA
DragDetect
GetDoubleClickTime
TileWindows
ToUnicode
FillRect
RegisterClassExA
EnumWindowStationsW
ShowWindow
ToUnicodeEx
WINNLSGetEnableStatus
InsertMenuItemW
MessageBoxA
GetScrollInfo
DestroyWindow
RegisterClassA
SubtractRect
SetActiveWindow
wsprintfW
SetWindowsHookExW
InSendMessageEx
CreateWindowExA
CheckMenuItem
PostThreadMessageW
SetWindowRgn
DrawEdge
IsIconic
OpenDesktopA
DlgDirSelectComboBoxExW
GetListBoxInfo
GetCaretBlinkTime
kernel32
GetOEMCP
WriteConsoleA
GetLogicalDrives
WriteConsoleW
SetCriticalSectionSpinCount
CreateMailslotA
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
GetCurrentProcessId
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
OpenMutexA
VirtualFree
GetLocaleInfoW
GetCurrentThread
TlsGetValue
ReadConsoleOutputA
EnterCriticalSection
GetEnvironmentStringsW
IsValidLocale
VirtualAlloc
CreateFileA
CreateWaitableTimerW
GetStartupInfoA
SetFilePointer
FreeLibrary
GetUserDefaultLCID
ExitProcess
lstrcpyW
GetEnvironmentStrings
QueryPerformanceCounter
LCMapStringA
EnumDateFormatsA
GetProcAddress
HeapReAlloc
lstrcmpi
GetFileType
GetStringTypeExA
TlsFree
CloseHandle
GetLastError
Sleep
GetStartupInfoW
GetStringTypeW
TerminateProcess
GetDateFormatA
IsDebuggerPresent
GetCurrentProcess
HeapCreate
SetConsoleActiveScreenBuffer
UnlockFile
UnhandledExceptionFilter
GetModuleHandleA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetACP
LoadLibraryA
GetTimeFormatA
GetCPInfo
EnumCalendarInfoA
GetUserDefaultLangID
CompareStringW
LCMapStringW
HeapDestroy
InterlockedIncrement
LocalShrink
VirtualQuery
GetConsoleMode
OutputDebugStringA
MultiByteToWideChar
CreateNamedPipeA
SetLastError
SetThreadContext
CreateSemaphoreA
IsValidCodePage
SetConsoleCtrlHandler
GetEnvironmentVariableA
RtlUnwind
GetPrivateProfileSectionNamesA
LeaveCriticalSection
CreateMutexA
HeapSize
GetDiskFreeSpaceW
GetLocaleInfoA
InterlockedDecrement
GetTimeZoneInformation
GetStdHandle
GetStringTypeA
GetCommandLineA
GetModuleFileNameA
HeapAlloc
SetHandleCount
EnumSystemLocalesA
GetConsoleCP
CompareStringA
LoadLibraryExA
WideCharToMultiByte
WritePrivateProfileStructA
SetStdHandle
GetFullPathNameW
CreateFileMappingA
GetConsoleOutputCP
TlsSetValue
ReleaseSemaphore
ConvertDefaultLocale
GetNamedPipeInfo
GetModuleHandleW
SetConsoleTitleW
InterlockedExchange
HeapFree
FlushFileBuffers
GetTickCount
ReadFile
CreateMailslotW
FreeEnvironmentStringsA
FindFirstFileExW
SetEnvironmentVariableA
SetThreadPriority
WriteFile
comctl32
ImageList_Add
ImageList_Replace
DrawStatusText
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetFilter
DrawInsert
ImageList_SetOverlayImage
InitCommonControlsEx
DestroyPropertySheetPage
ImageList_GetImageRect
ImageList_GetImageCount
DrawStatusTextA
ImageList_Copy
ImageList_SetBkColor
CreatePropertySheetPage
ImageList_Draw
ImageList_AddMasked
CreateToolbarEx
ImageList_Duplicate
CreateToolbar
ImageList_LoadImageW
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 242KB - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ