Static task
static1
Behavioral task
behavioral1
Sample
0a5aefd5218fc0acd74e3cc1d5931833_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0a5aefd5218fc0acd74e3cc1d5931833_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0a5aefd5218fc0acd74e3cc1d5931833_JaffaCakes118
-
Size
308KB
-
MD5
0a5aefd5218fc0acd74e3cc1d5931833
-
SHA1
fdb8fe9dcbac9cec3a8a1efc01a980d5320a1f44
-
SHA256
e07e70f62ae903c4b7cafe4c17bc69d249a77ce54eaf349fb38e14748ed489f8
-
SHA512
7c37f303d0ba1eb9a609b6d1c0bb3dcb1b8e67ac6786cabcf01606044728e0bc3808053121013924e29eb123a29b875fc123d782d8f62927fee2920201b8c902
-
SSDEEP
6144:fSyCyk4YnY77Y3TzqHL8w7Fw6X0ky/2pNbjRVxwTBHLD2:6yJ7aEK6bRvwTF2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a5aefd5218fc0acd74e3cc1d5931833_JaffaCakes118
Files
-
0a5aefd5218fc0acd74e3cc1d5931833_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e9e22b50808c4dcc51766173b275bfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHSetValueA
PathFindExtensionA
PathFindFileNameA
advapi32
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
kernel32
GlobalAddAtomA
FlushFileBuffers
SetEndOfFile
GetThreadLocale
GlobalGetAtomNameA
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
UnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
GetConsoleCP
GetConsoleMode
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetACP
SetStdHandle
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
RaiseException
LocalAlloc
SetFilePointer
ReadFile
CreateFileA
GetCurrentProcess
GetModuleFileNameA
SetLastError
GetVersionExA
TerminateProcess
CloseHandle
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetCurrentProcessId
WriteFile
SetUnhandledExceptionFilter
GetSystemTime
GetTimeZoneInformation
GetLastError
lstrlenA
CompareStringA
InterlockedExchange
GetVersion
MultiByteToWideChar
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
TlsAlloc
user32
ClientToScreen
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
UnregisterClassA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
LoadCursorA
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
DestroyWindow
IsWindow
GetDlgItem
GetSystemMetrics
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetDC
ReleaseDC
GetMenuItemCount
GetSubMenu
GetSysColorBrush
DestroyMenu
ShowWindow
SetForegroundWindow
GetMenu
GetForegroundWindow
GetWindow
IsWindowVisible
GetParent
GetClassNameA
GetWindowThreadProcessId
PostMessageA
RegisterWindowMessageA
EnableWindow
GetWindowTextA
GetCursorPos
SetWindowTextA
LoadIconA
GetMessageA
gdi32
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ExtTextOutA
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
DeleteObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ