Static task
static1
Behavioral task
behavioral1
Sample
086478d26710a1a7f62ccdaa78c2f2ab_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
086478d26710a1a7f62ccdaa78c2f2ab_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
086478d26710a1a7f62ccdaa78c2f2ab_JaffaCakes118
-
Size
2.4MB
-
MD5
086478d26710a1a7f62ccdaa78c2f2ab
-
SHA1
94df2eecc5c5385f92622841ed22869f6fbfa63c
-
SHA256
01011b171f6f2f81d4a6eeef3d249afa5b94818b7dc542ee40b2bf729717dc2b
-
SHA512
b0881de64623c5367fed7d02a42f2c67757fa1051cd67e6e5c28f1e7b812026d6da061bc35019ab9f534019a42b50da237d32370bfee1488d814872722a6b8d5
-
SSDEEP
49152:DEjAqANqEOvSHhPEB9zuh+Zz1TEPuVIuZrsvBnMKYvBcm+UkcPbK509KSvJ4FNNs:DEjAqANqEOvSHhPEB9zuh+Zz1TEPuVIy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 086478d26710a1a7f62ccdaa78c2f2ab_JaffaCakes118
Files
-
086478d26710a1a7f62ccdaa78c2f2ab_JaffaCakes118.exe windows:1 windows x86 arch:x86
5166ad9a2f2c47ae0cbd7dd1b43fd136
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileInformationByHandle
SetFilePointer
_lopen
_lread
CreateFileA
ReadFile
CloseHandle
lstrcpyA
lstrcatA
GlobalHandle
lstrcmpA
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
OpenFile
GetModuleFileNameA
GetProcAddress
GetVersion
GetCommandLineA
GetEnvironmentStrings
GetStartupInfoA
GetModuleHandleA
DeleteFileA
GetLastError
GetLocalTime
GlobalUnlock
GlobalLock
GlobalAlloc
_lclose
LoadLibraryA
RtlUnwind
ExitProcess
GetTimeZoneInformation
GetStdHandle
GetFileType
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
VirtualFree
VirtualAlloc
SetStdHandle
FlushFileBuffers
WideCharToMultiByte
MultiByteToWideChar
SetEndOfFile
RaiseException
SetEnvironmentVariableA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLogicalDrives
GetDriveTypeA
FindFirstFileA
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
_hread
GlobalFree
GetFullPathNameA
user32
EnableMenuItem
DestroyWindow
GetMenu
DialogBoxParamA
EndDialog
CheckRadioButton
GetDC
GetWindowLongA
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
PostQuitMessage
ReleaseDC
SetDlgItemTextA
PostMessageA
GetKeyState
GetMenuState
CheckMenuItem
DrawMenuBar
RedrawWindow
FindWindowA
BringWindowToTop
EnumWindows
GetWindowThreadProcessId
GetWindowTextA
LoadAcceleratorsA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
RegisterClassA
GetMenuItemCount
wsprintfA
SetMenuItemInfoA
LoadCursorA
SetCursor
CreatePopupMenu
AppendMenuA
ClientToScreen
TrackPopupMenu
DestroyMenu
GetSystemMetrics
SendDlgItemMessageA
SetWindowTextA
GetDlgItemTextA
SetScrollRange
SetScrollPos
GetScrollPos
CheckDlgButton
GetDlgItem
EnableWindow
DefWindowProcA
IsDlgButtonChecked
gdi32
SetTextColor
SetBkMode
SetPixel
GetDeviceCaps
GetStockObject
GetSystemPaletteEntries
DeleteObject
TextOutA
SelectObject
GetPixel
GetObjectA
DeleteDC
StretchBlt
CreateDIBSection
SetStretchBltMode
CreateCompatibleDC
winmm
mmioAscend
joyGetPosEx
joyGetNumDevs
joyGetDevCapsA
timeGetTime
mmioCreateChunk
mmioWrite
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioSeek
mmioOpenA
mmioDescend
mmioRead
mmioClose
mciGetErrorStringA
mciSendCommandA
auxSetVolume
waveOutOpen
waveOutClose
waveOutGetVolume
waveOutSetVolume
waveOutPrepareHeader
waveOutWrite
waveOutGetErrorTextA
waveOutReset
waveOutUnprepareHeader
auxGetVolume
ddraw
DirectDrawCreate
dsound
DirectSoundCreate
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 5.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 909KB - Virtual size: 909KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 232KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.9bss Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE