?_TEMPFILE@@3UtagAPICLASS@@A
Static task
static1
Behavioral task
behavioral1
Sample
04eda739f840ea2ba17fa540ab7b0e85_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
04eda739f840ea2ba17fa540ab7b0e85_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
04eda739f840ea2ba17fa540ab7b0e85_JaffaCakes118
-
Size
460KB
-
MD5
04eda739f840ea2ba17fa540ab7b0e85
-
SHA1
c949360e6efa1038d3750d6f79e32f8b7a8371b0
-
SHA256
908ebdc22edc251a2ae9175e889941e39db6773bb5e9bfa69318fc02f53758a1
-
SHA512
d8b73f63d324d66039adf2957bde15d8b9199e3981a791266c0315add1ffc1feab829ab8e47ae24d494adce6e2a364b6c38b068e855c43b169b80bdcfa0192de
-
SSDEEP
12288:sMXrbgbJTBnnnnnnnnlnnnnnnnnlnnnnnnnnlnnnnnnnnlnnnnnnnnlnnnnnnnne:sM7bgbJFnnnnnnnnlnnnnnnnnlnnnnnA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04eda739f840ea2ba17fa540ab7b0e85_JaffaCakes118
Files
-
04eda739f840ea2ba17fa540ab7b0e85_JaffaCakes118.exe windows:4 windows x86 arch:x86
551a34916de7c61f3e8ad7d12d29f29c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GlobalLock
GetModuleFileNameA
IsValidCodePage
GetACP
ExitProcess
InterlockedIncrement
InterlockedExchangeAdd
FreeResource
LockResource
LoadResource
FindResourceA
GetLastError
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
GetStringTypeW
GetStringTypeA
LoadLibraryA
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetFileType
GetStdHandle
SetHandleCount
CopyFileA
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
HeapReAlloc
HeapFree
HeapAlloc
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetProcAddress
FreeLibrary
CreateEventA
WaitForSingleObject
ResetEvent
TerminateThread
CloseHandle
CreateThread
GetFileAttributesA
GetEnvironmentVariableA
SetStdHandle
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcmpiA
FlushFileBuffers
EnterCriticalSection
LeaveCriticalSection
FindFirstFileA
FindClose
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
GetCurrentDirectoryA
SetEvent
lstrcpynA
LocalAlloc
LocalFree
lstrcatA
GetTickCount
Sleep
GetFileSize
_lclose
_lread
SetCurrentDirectoryA
SetEndOfFile
DeleteFileA
_lcreat
_lwrite
GetEnvironmentStringsW
_llseek
lstrcpyA
lstrlenA
_lopen
MultiByteToWideChar
SetFilePointer
user32
GetClientRect
EnableWindow
SetWindowLongA
EndDialog
DialogBoxParamA
GetDC
ReleaseDC
BeginPaint
KillTimer
SetClassLongA
wsprintfA
MoveWindow
SetTimer
ShowWindow
GetMenu
SetCursor
LoadBitmapA
LoadCursorA
GetSysColor
LoadMenuA
LoadIconA
CheckMenuItem
DestroyMenu
MessageBoxA
EndPaint
GetSystemMetrics
ClientToScreen
PtInRect
GetDlgItemTextA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
PostMessageA
GetDesktopWindow
GetWindowRect
SetWindowPos
GetWindowTextA
GetDlgItemInt
GetWindowTextLengthA
SendDlgItemMessageA
SetDlgItemInt
SetScrollInfo
SetDlgItemTextA
ValidateRect
InvalidateRect
RegisterClipboardFormatA
SetWindowTextA
GetWindowLongA
LoadStringA
GetDlgItem
SendMessageA
gdi32
CreatePen
DeleteObject
SetDIBitsToDevice
CreateCompatibleDC
SelectObject
Polyline
GetTextExtentPointA
GetSystemPaletteEntries
BitBlt
DeleteDC
CreateSolidBrush
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegSetValueA
RegCreateKeyA
shell32
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
Shell_NotifyIconA
ole32
ReleaseStgMedium
OleUninitialize
RevokeDragDrop
RegisterDragDrop
OleInitialize
comctl32
CreateToolbarEx
ord17
ImageList_LoadImageA
ImageList_Destroy
wsock32
select
__WSAFDIsSet
httpreq
ord1
ftpreq
_FtpFile
facehelp
ord20
ord15
ord14
ord22
ord16
ord21
segfile
ord2
btcnnet
ord2
ord1
ord5
btfile
ord5
ord4
ord1
Exports
Exports
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 348KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ