Static task
static1
Behavioral task
behavioral1
Sample
10001cc3d63953c8617ffa4feed2aa22_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
10001cc3d63953c8617ffa4feed2aa22_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
10001cc3d63953c8617ffa4feed2aa22_JaffaCakes118
-
Size
418KB
-
MD5
10001cc3d63953c8617ffa4feed2aa22
-
SHA1
c2251eb2f5bbd8a4dd477ceed606edeb7dd894a9
-
SHA256
e290933d5aac411080aa578d43e25ff01e91a5496576732687ec738e59217761
-
SHA512
532f56b5a946a494cff2866333a85d079e589652b60893e024825e6ab970a0550be319e1c6ac2f2f3bc58bf66971fa120ef1cff1e86d67358b6db04c49ee0e28
-
SSDEEP
12288:4TbeKm2l9uoW+l1RlTHByihhzOb2hjc91P3fcN7v4qAqqL:4TbepEuoJHBykzOihjmPfo8q1q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10001cc3d63953c8617ffa4feed2aa22_JaffaCakes118
Files
-
10001cc3d63953c8617ffa4feed2aa22_JaffaCakes118.exe windows:4 windows x86 arch:x86
007e338710b95dd6d3d20f64ba1858d0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
BitBlt
GetTextFaceA
GetCharWidthA
SetBkColor
SelectClipRgn
CopyMetaFileA
CreateMetaFileA
CreateFontA
SetMapMode
TextOutA
GetTextExtentPoint32A
SetBkMode
SetWindowOrgEx
MoveToEx
EnumFontsA
SetROP2
RectVisible
GetBitmapBits
Ellipse
CreateBitmap
Escape
RestoreDC
SetTextAlign
SetWindowExtEx
CreateFontIndirectA
PatBlt
CreateSolidBrush
LineTo
CloseMetaFile
CreateRectRgnIndirect
GetObjectA
GetCharWidthW
TextOutW
GetCharWidth32W
EnumFontFamiliesExA
DeleteMetaFile
GetClipBox
SetRectRgn
GetTextMetricsA
GetCharWidth32A
Polygon
ExtTextOutA
SetTextColor
GetMapMode
SetMapperFlags
ExtTextOutW
GetStockObject
CreatePen
CreateICA
CreateRectRgn
Arc
CreatePatternBrush
PtVisible
CreateCompatibleBitmap
advapi32
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
shell32
DragAcceptFiles
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
GetStdHandle
CreateMailslotW
FlushFileBuffers
SetStdHandle
SetHandleCount
GetOEMCP
GetThreadPriority
GetFileType
RaiseException
TerminateProcess
CompareStringW
IsBadReadPtr
GetEnvironmentStrings
lstrlenA
GetStringTypeW
WriteFile
lstrcpyA
GetStringTypeA
user32
GetMessageA
GetMenu
GetScrollPos
GetKeyState
SetMenu
PeekMessageA
GetCaretBlinkTime
DispatchMessageA
DrawMenuBar
CloseClipboard
FillRect
GetFocus
GetClipboardData
GetClassLongW
GetAsyncKeyState
IsZoomed
SetWindowLongA
SetClipboardData
PtInRect
LoadIconA
OpenClipboard
GetWindowTextA
CheckDlgButton
HiliteMenuItem
GetDoubleClickTime
SetScrollRange
CopyRect
MessageBoxA
IsWindowUnicode
GetDialogBaseUnits
IsWindowVisible
BeginPaint
EqualRect
UnionRect
DialogBoxParamA
InvertRect
GetSystemMenu
SetRectEmpty
SetScrollPos
DefWindowProcW
DispatchMessageW
CheckMenuItem
OffsetRect
SendDlgItemMessageA
WinHelpA
DefWindowProcA
EmptyClipboard
EnableWindow
GetMenuItemCount
KillTimer
SetRect
SetDlgItemTextA
DeleteMenu
GetKeyboardLayoutList
ActivateKeyboardLayout
InvalidateRgn
GetNextDlgTabItem
GetMenuItemID
RegisterClipboardFormatA
GetKeyboardLayout
ShowCursor
GetClassLongA
GetMessageW
SendMessageA
IntersectRect
ScreenToClient
LoadKeyboardLayoutA
FindWindowA
GetMenuState
VkKeyScanA
SetWindowTextA
MessageBeep
IsDialogMessageA
EnumWindowStationsA
RegisterClassW
GetDlgItemTextA
BringWindowToTop
SetWindowPos
MapWindowPoints
ReleaseCapture
IsDlgButtonChecked
IsClipboardFormatAvailable
SetCapture
GetMessageTime
DestroyWindow
CheckRadioButton
LoadCursorA
MoveWindow
GetDesktopWindow
CreateDialogParamA
SetCursor
AppendMenuA
GetMessagePos
SetTimer
GetScrollRange
SetParent
LoadStringA
EndPaint
ScrollDC
GetMenuCheckMarkDimensions
UpdateWindow
GetClassInfoA
InvalidateRect
Sections
.text Size: 258KB - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bomex Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ