Static task
static1
Behavioral task
behavioral1
Sample
07b8e525d0b117d97979bf588f46d6ca_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07b8e525d0b117d97979bf588f46d6ca_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
07b8e525d0b117d97979bf588f46d6ca_JaffaCakes118
-
Size
146KB
-
MD5
07b8e525d0b117d97979bf588f46d6ca
-
SHA1
05d31fde8f8834b162a66e7f1b53c5083bd3c838
-
SHA256
da0f7857fd8076eb569dd3068b08af7181adcdd5ada200f9f3c00a5fc4c59f52
-
SHA512
9c6ee6b4e74d65104fc503c6e32b6b532d5cf739abaef081d96cf4dd4d90b0cbe598340d98bced0f1aa6fecc21e53ef7b914282de810d76e7c51d206459f989b
-
SSDEEP
3072:QmLLwCvruo1MSSC33lte+OgsD+zYJdz+N:QmLLJL1DnTe9hD0e+N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07b8e525d0b117d97979bf588f46d6ca_JaffaCakes118
Files
-
07b8e525d0b117d97979bf588f46d6ca_JaffaCakes118.exe windows:4 windows x86 arch:x86
b7592e1cbb19ebacef467e0512dd1173
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord6
ord17
kernel32
GetTickCount
LoadLibraryA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
GetFileType
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
LCMapStringW
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
RaiseException
GetLastError
HeapFree
GetProcAddress
HeapSize
HeapAlloc
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetStartupInfoA
RtlUnwind
Sleep
WriteFile
SetEndOfFile
SetFilePointer
GlobalAlloc
GlobalFree
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetProfileStringA
SetCurrentDirectoryA
GetCommandLineA
GetFileAttributesExA
GetModuleHandleA
GetFileSize
ReadFile
CloseHandle
CreateFileA
user32
GetScrollPos
SetScrollInfo
GetDlgItem
SendMessageA
GetClientRect
GetSystemMetrics
DestroyWindow
GetWindowLongA
DefWindowProcA
KillTimer
GetScrollInfo
BeginPaint
EndPaint
ScreenToClient
IsWindowVisible
LoadMenuA
GetSubMenu
SetWindowLongA
SetWindowPos
GetMenuStringA
GetDC
ReleaseDC
LoadCursorA
SetCursor
EnableMenuItem
CheckMenuItem
GetCursorPos
TrackPopupMenu
SetForegroundWindow
DialogBoxParamA
InvalidateRect
SetFocus
CallWindowProcA
PostMessageA
GetDlgItemInt
GetParent
GetWindowTextA
EnableWindow
LoadIconA
SetClassLongA
SetWindowTextA
EndDialog
DrawTextA
GetWindowRect
MoveWindow
ShowWindow
gdi32
GetPixel
Polygon
Polyline
SetBkMode
RoundRect
BitBlt
DeleteDC
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor
SetBkColor
DeleteObject
CreateSolidBrush
CreatePen
SelectObject
GetTextMetricsA
Rectangle
MoveToEx
LineTo
GetStockObject
comdlg32
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
shell32
ShellExecuteA
DragQueryFileA
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ