Static task
static1
Behavioral task
behavioral1
Sample
09dc2f2eed5363d06d357d0b18c8fc1c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
09dc2f2eed5363d06d357d0b18c8fc1c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
09dc2f2eed5363d06d357d0b18c8fc1c_JaffaCakes118
-
Size
216KB
-
MD5
09dc2f2eed5363d06d357d0b18c8fc1c
-
SHA1
4ed1f8762226010020cbcafef8ff73dce26791c9
-
SHA256
174b021637601c973562296f370d141a865db60da049fa47ed0b4a1c7a09e4d0
-
SHA512
e2f7e4fb89d58d3ae5b8660140adcafec303a035ba54c9dcc344ba51fa4cab36a5e6d4a064af1db713cf1cc8211891460a8433051a075b913f7a237467ef6660
-
SSDEEP
6144:AwTh2AFgcFeLPJcxDurAgxFvboaMYIcYW:AwTh2AFgcFeTJy0xZoJs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09dc2f2eed5363d06d357d0b18c8fc1c_JaffaCakes118
Files
-
09dc2f2eed5363d06d357d0b18c8fc1c_JaffaCakes118.exe windows:5 windows x86 arch:x86
dfcbfd3d44e9becc3522667c5a358705
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
MultiByteToWideChar
IsValidCodePage
Sleep
WaitForSingleObject
CreateEventW
RemoveDirectoryW
FreeLibrary
ReleaseMutex
CreateMutexW
CreateProcessW
LoadLibraryA
OpenProcess
HeapFree
HeapAlloc
GetProcessHeap
GetLastError
GetCurrentThread
GetCurrentProcessId
TerminateProcess
GetTickCount
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
CreateDirectoryW
GetStringTypeA
LCMapStringA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetModuleHandleA
HeapReAlloc
QueryPerformanceCounter
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
GetModuleFileNameA
GetStdHandle
LCMapStringW
ExitProcess
HeapSize
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
ExitThread
GetSystemTimeAsFileTime
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalFree
WideCharToMultiByte
lstrlenA
DeleteCriticalSection
GetTempPathA
SetFileAttributesA
LoadLibraryW
DeleteFileA
GetFileAttributesW
SetFileAttributesW
CopyFileW
InterlockedIncrement
lstrlenW
GetProcAddress
GetModuleHandleW
CreateThread
GetPrivateProfileStringW
GetUserDefaultLangID
GetPrivateProfileIntW
GetVersionExW
SetLastError
InterlockedDecrement
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetTempPathW
GetTempFileNameW
CreateFileW
GetFileSize
CloseHandle
DeleteFileW
ReadFile
GetStringTypeW
InitializeCriticalSection
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
user32
GetClassNameW
PostMessageW
SendMessageTimeoutW
IsWindow
GetDC
InflateRect
GetWindowDC
IsWindowEnabled
ReleaseDC
RedrawWindow
GetActiveWindow
DialogBoxParamW
RegisterWindowMessageW
DestroyWindow
GetDesktopWindow
CreateWindowExW
CallWindowProcW
FindWindowW
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
PeekMessageW
LoadIconW
SetClassLongW
SetForegroundWindow
EnumWindows
MessageBoxW
KillTimer
IsWindowVisible
FillRect
SetTimer
LoadCursorW
SetCursor
GetWindowTextW
SetFocus
SetWindowTextW
InvalidateRect
EnumChildWindows
ShowWindow
GetSysColor
DrawTextW
SetWindowLongW
EnableWindow
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
IsDlgButtonChecked
GetUpdateRect
EndPaint
BeginPaint
ScreenToClient
GetWindowLongW
EndDialog
SendMessageW
UnregisterClassA
CreateDialogParamW
gdi32
ExcludeClipRect
SetBkColor
TextOutW
CreateSolidBrush
GetStockObject
GetObjectW
CreateFontIndirectW
CreateFontW
SelectObject
SetTextColor
DeleteObject
SetBkMode
advapi32
OpenThreadToken
OpenProcessToken
GetTokenInformation
EqualSid
CopySid
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegFlushKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
shell32
SHChangeNotify
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
SHGetSpecialFolderPathW
ole32
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
SysFreeString
SysAllocString
SysStringLen
SysAllocStringByteLen
VariantClear
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ