Static task
static1
Behavioral task
behavioral1
Sample
040e7676b78979514accd2c1605fa523_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
040e7676b78979514accd2c1605fa523_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
040e7676b78979514accd2c1605fa523_JaffaCakes118
-
Size
632KB
-
MD5
040e7676b78979514accd2c1605fa523
-
SHA1
26b99fdc37892ebb0bb7e14dda8fc330d0563cc0
-
SHA256
1f486f1da6467fd16fef349d3d1f9262b60539e77b1adf57468771119b018324
-
SHA512
073a0a271846e211c195a787f57c7f0e8580e69364b56a4d5131834df6020c9aec5fcf6118120e87f8fe61e53b82285a0c1b3cc26f6f6b98c99f2979fedf4d7b
-
SSDEEP
12288:WMez4id+r2Wr9Qqk7Id6pVdBXnaXcyD+2v9A8Sxpe71gXdWr:WMez4isqyVk7IdUJXnucyDvS8SLe7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 040e7676b78979514accd2c1605fa523_JaffaCakes118
Files
-
040e7676b78979514accd2c1605fa523_JaffaCakes118.exe windows:4 windows x86 arch:x86
27a4b17b8ee7758c71019f052c5c9f1c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
PrintDlgA
ReplaceTextW
PrintDlgW
ChooseFontW
kernel32
WriteConsoleOutputA
LCMapStringA
CloseHandle
GetCurrentProcess
GetTimeZoneInformation
GetLastError
MultiByteToWideChar
GetTickCount
GetEnvironmentStringsW
GetLocalTime
MoveFileA
GetFileType
CreateMutexA
OpenWaitableTimerW
TlsSetValue
TerminateProcess
GetStringTypeA
WriteFileEx
CreateNamedPipeW
GetFileTime
LoadLibraryA
GetProcAddress
ReadFile
InterlockedDecrement
FormatMessageA
GetModuleFileNameA
GetCommandLineW
TlsFree
GetExitCodeThread
WriteConsoleOutputW
SetConsoleTitleA
UnhandledExceptionFilter
GetCurrentProcessId
GetStringTypeW
LeaveCriticalSection
HeapReAlloc
HeapCreate
InterlockedExchange
GetCurrentThreadId
CompareStringW
GetStartupInfoW
WideCharToMultiByte
RtlUnwind
LockResource
CreateMutexW
GetSystemTimeAsFileTime
VirtualAlloc
GetVersion
EnumCalendarInfoW
SetTimeZoneInformation
GetPrivateProfileStringW
GetCommandLineA
SetFilePointer
GetSystemTime
ReadConsoleOutputA
GlobalCompact
TlsGetValue
FindFirstFileA
FindResourceExA
HeapValidate
UnlockFileEx
QueryPerformanceCounter
GetModuleHandleA
GetStdHandle
GetDiskFreeSpaceA
SetThreadAffinityMask
GetEnvironmentStrings
WriteFile
FreeEnvironmentStringsW
LocalFlags
VirtualQuery
OpenMutexA
SetHandleCount
LCMapStringW
GetVersionExW
TlsAlloc
GetModuleFileNameW
WritePrivateProfileStringW
DeleteCriticalSection
GetCurrentThread
SetThreadLocale
SetStdHandle
WaitNamedPipeW
GetExitCodeProcess
PulseEvent
InitializeCriticalSection
SetLastError
LocalFileTimeToFileTime
OpenFileMappingW
HeapDestroy
FlushFileBuffers
SetEnvironmentVariableA
FindClose
GetStartupInfoA
GetConsoleMode
FreeEnvironmentStringsA
HeapFree
EnterCriticalSection
GetProfileIntW
VirtualFree
InterlockedIncrement
IsBadWritePtr
ExitProcess
CompareStringA
HeapAlloc
GetCPInfo
GetTempFileNameW
comctl32
ImageList_LoadImageA
ImageList_GetDragImage
ImageList_Merge
ImageList_SetImageCount
ImageList_Duplicate
InitCommonControlsEx
ImageList_GetIcon
CreateToolbarEx
CreatePropertySheetPage
ImageList_DragMove
ImageList_LoadImageW
ImageList_SetBkColor
MakeDragList
ImageList_GetBkColor
GetEffectiveClientRect
ImageList_SetDragCursorImage
DrawStatusText
CreatePropertySheetPageA
DrawInsert
ImageList_GetImageRect
ImageList_SetIconSize
_TrackMouseEvent
ImageList_GetImageCount
ImageList_DragEnter
shell32
ShellExecuteExW
DragQueryFileAorW
SHChangeNotify
SHLoadInProc
SHFileOperationW
gdi32
SetFontEnumeration
EnumFontFamiliesA
SetViewportExtEx
SetTextAlign
GetViewportExtEx
AddFontResourceA
GdiPlayScript
CloseFigure
SetBitmapBits
SaveDC
UpdateICMRegKeyW
EndPage
CreateDIBSection
GetKerningPairs
CombineRgn
PolyBezier
RealizePalette
GetCharABCWidthsFloatA
user32
GetMessageExtraInfo
SendIMEMessageExW
EnableWindow
MessageBeep
UnregisterDeviceNotification
ValidateRgn
CreateCursor
CopyAcceleratorTableW
CreateWindowExA
CreateDialogIndirectParamW
ShowWindowAsync
GetQueueStatus
DestroyWindow
TileChildWindows
CreateDialogIndirectParamA
BroadcastSystemMessageW
IsCharAlphaW
DefFrameProcA
IsWindowEnabled
MessageBoxExW
MessageBoxA
ScrollWindowEx
GetAltTabInfo
SetMessageExtraInfo
LoadCursorFromFileA
RegisterClassExA
DefWindowProcA
UpdateWindow
GetListBoxInfo
CheckDlgButton
IsWindowUnicode
SetActiveWindow
DdePostAdvise
ShowWindow
GetCaretPos
CreateIconFromResourceEx
RegisterClassA
DialogBoxIndirectParamW
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ