Static task
static1
Behavioral task
behavioral1
Sample
0e72430ad68681e2dd6f18d448c349d2_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0e72430ad68681e2dd6f18d448c349d2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e72430ad68681e2dd6f18d448c349d2_JaffaCakes118
-
Size
6.2MB
-
MD5
0e72430ad68681e2dd6f18d448c349d2
-
SHA1
c7cf111f9b4446c76549f7e175fc0d8537b66368
-
SHA256
cb13cf808d479850a22810db5602454815e737dba41cdcba9ff334a548981748
-
SHA512
d01135338a0d18b1232aca6fc3bde7300f0891c3d349d3f37f4ff2e91ab299d91b7e4c3c02d09271baff53e300b9ec24fcb8ea1f7fad1e38feb10e9dd6ea1cdf
-
SSDEEP
98304:qovUtWel4GD64MDOSw5aYAtvhdmm7JlkSb/eKsWRCHYNfAgtf9:qbUEMPtYABhUm7JlkSSKsdHYNzf9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e72430ad68681e2dd6f18d448c349d2_JaffaCakes118
Files
-
0e72430ad68681e2dd6f18d448c349d2_JaffaCakes118.exe windows:5 windows x86 arch:x86
fd6d2dfe0f8da1ca0447a447d6e8364c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
dsound
DirectSoundCreate
gdi32
SelectObject
Rectangle
GetStockObject
SetDCBrushColor
kernel32
GetFileAttributesA
GetEnvironmentVariableA
GetLastError
SetLastError
GetProcAddress
LoadLibraryA
GetModuleFileNameA
OutputDebugStringA
GetVersionExA
CloseHandle
MultiByteToWideChar
GetModuleHandleA
CreateDirectoryA
FindResourceA
LoadResource
SizeofResource
LockResource
CreateFileA
QueryPerformanceCounter
WideCharToMultiByte
QueryPerformanceFrequency
GetCommandLineW
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
ReadProcessMemory
SetCurrentDirectoryA
CreateFileW
SetEndOfFile
VirtualQuery
GetProcessHeap
GetTimeZoneInformation
Sleep
FlushFileBuffers
WaitForSingleObject
GetExitCodeProcess
CreatePipe
CompareStringW
SetStdHandle
LoadLibraryW
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
HeapSize
GetConsoleMode
GetConsoleCP
SetFilePointer
LockResource
ReadFile
InitializeCriticalSectionAndSpinCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FreeLibrary
LocalFree
GetSystemDefaultLangID
GetCurrentDirectoryA
SwitchToThread
CreateThread
SetThreadPriority
DeleteCriticalSection
EnterCriticalSection
GetStartupInfoW
HeapSetInformation
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsProcessorFeaturePresent
LeaveCriticalSection
InitializeCriticalSection
HeapCreate
WriteFile
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
DuplicateHandle
CreateProcessA
ExitProcess
GetModuleHandleW
RtlUnwind
GetModuleFileNameW
GetStdHandle
GetFileType
GetStringTypeW
TryEnterCriticalSection
FormatMessageA
DecodePointer
EncodePointer
HeapFree
HeapAlloc
HeapReAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileExA
FindNextFileA
FindClose
SetEnvironmentVariableA
GetCommandLineA
WriteConsoleW
shell32
CommandLineToArgvW
user32
GetWindowRect
MessageBoxA
GetKeyboardState
DestroyWindow
MoveWindow
RegisterClassA
GetWindowThreadProcessId
LoadCursorA
AdjustWindowRect
SetWindowTextA
GetSystemMetrics
DispatchMessageA
ShowWindow
SetWindowPos
DefWindowProcA
SetClassLongA
ReleaseDC
PeekMessageA
CreateWindowExA
GetWindowLongA
SetWindowLongA
SetRect
ScreenToClient
SetCursorPos
GetCursorPos
GetDesktopWindow
EndPaint
SetCursor
PostQuitMessage
GetWindowDC
LoadIconA
GetClientRect
BeginPaint
GetMonitorInfoA
TranslateMessage
winmm
mmioSeek
mmioGetInfo
mmioRead
mmioDescend
mmioSetInfo
timeGetTime
timeBeginPeriod
mmioOpenA
mmioWrite
mmioCreateChunk
mmioClose
mmioAdvance
mmioAscend
d3d9
Direct3DCreate9
ole32
CoCreateInstance
CoInitialize
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 86KB - Virtual size: 6.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.TEDATA Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE