Static task
static1
Behavioral task
behavioral1
Sample
07d5dbcef972c7d7a71c76a376a4c5e0_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
07d5dbcef972c7d7a71c76a376a4c5e0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
07d5dbcef972c7d7a71c76a376a4c5e0_JaffaCakes118
-
Size
400KB
-
MD5
07d5dbcef972c7d7a71c76a376a4c5e0
-
SHA1
f826b579d12286fd0e8d7c45f8556d8c68c50c61
-
SHA256
9d759a7ae62bdda011311459971f30cacef703a51849d08f1cf299b773ea048f
-
SHA512
1ab92e91cb534ca93cb6ba92822e15073d4599c70457c9eca0f62d9b288bb5baa48dadd2aee9e25b943d0c5bec49b52635e40642a2ee06e08341a7e4337b16e2
-
SSDEEP
12288:s7eZSddywJSWfP5oYUzDjkqOJfkU4hK/oo:6wSdQwJSWnm1zvBOJfkUgK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07d5dbcef972c7d7a71c76a376a4c5e0_JaffaCakes118
Files
-
07d5dbcef972c7d7a71c76a376a4c5e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
de8175c7dab77facb7913c10040f09dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
gdi32
BitBlt
SetTextColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
kernel32
GetSystemTimeAsFileTime
GetProcAddress
InitializeCriticalSection
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
SetEndOfFile
SetEvent
SetUnhandledExceptionFilter
LocalFree
SetLastError
UnhandledExceptionFilter
FindNextFileW
GetStringTypeW
FindResourceW
ReadFile
FreeLibrary
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
VirtualProtect
GlobalUnlock
LocalAlloc
FileTimeToLocalFileTime
GetCPInfo
TlsFree
CreateProcessA
GetVersionExA
SetFileTime
IsDebuggerPresent
IsValidCodePage
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
LoadLibraryExA
WriteConsoleA
WriteFile
RaiseException
UnmapViewOfFile
GetLocalTime
FlushFileBuffers
WriteConsoleW
GetSystemTime
ReleaseMutex
LCMapStringA
CompareStringW
GetLocaleInfoA
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
LCMapStringW
lstrlenW
GetConsoleMode
LoadLibraryA
GetSystemInfo
HeapReAlloc
TerminateProcess
GetSystemDirectoryA
CloseHandle
HeapDestroy
ResetEvent
QueryPerformanceCounter
HeapFree
VirtualAlloc
HeapAlloc
GetCommandLineW
InterlockedCompareExchange
GetCommandLineA
InterlockedExchange
GetConsoleOutputCP
GlobalAlloc
GetConsoleCP
InterlockedIncrement
FindClose
Sleep
GetDiskFreeSpaceA
lstrcmpA
SetStdHandle
CreateFileMappingA
GetCurrentProcess
GetWindowsDirectoryA
SetHandleCount
SetErrorMode
GetStringTypeA
GetModuleFileNameW
GetFileAttributesA
GetModuleHandleW
GetOEMCP
GetACP
MapViewOfFile
VirtualQuery
GetFileSize
CreateEventA
GetCurrentThreadId
CreateFileW
CreateThread
GetVersion
GetModuleFileNameA
ExpandEnvironmentStringsA
GetFileType
CompareStringA
VirtualFree
GetFileAttributesW
HeapSize
GetTickCount
FindFirstFileA
LockResource
LoadResource
SetFilePointer
TlsAlloc
CreateFileA
HeapCreate
GetFullPathNameA
FormatMessageA
GetEnvironmentVariableA
GetLastError
WaitForSingleObject
SizeofResource
FindResourceA
GetModuleHandleA
GetProcessHeap
GetStdHandle
GetCurrentProcessId
DeleteFileA
InterlockedDecrement
TlsGetValue
CreateDirectoryA
ExitProcess
user32
SystemParametersInfoA
DefWindowProcA
GetCursorPos
EnableWindow
SetTimer
IsIconic
EndPaint
SetForegroundWindow
GetWindowRect
PostMessageA
PostQuitMessage
ScreenToClient
SendMessageA
GetMessageA
InvalidateRect
GetClientRect
PeekMessageA
TrackPopupMenu
CallWindowProcA
RegisterClassA
IsWindow
ShowWindow
DestroyWindow
LoadIconA
SetWindowPos
TranslateMessage
FillRect
IsWindowVisible
ReleaseDC
GetParent
SetFocus
SetWindowLongA
MessageBoxA
GetFocus
DispatchMessageA
CheckMenuItem
GetSysColor
GetSystemMetrics
BeginPaint
SetCapture
GetDC
GetDlgItem
GetDesktopWindow
GetWindowLongA
DrawTextA
CreateWindowExA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
seoaka Size: 396KB - Virtual size: 395KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE