Static task
static1
Behavioral task
behavioral1
Sample
0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118
-
Size
153KB
-
MD5
0eaa38ff4429df0ebc87e23af4f6948b
-
SHA1
2416af8c2120b72a2df4f5ec8e83ac22dbb5d0ca
-
SHA256
e4b2c7d488ade99b836841206835e7677759a6aad7cc30264fe327787eefa22c
-
SHA512
20d00fcb92bf7d022ee6faed576d32d83036a0447cfe914a0859f2ae19b547286d643c0a7d876c440cec9a2c2d02dc795e8facaad23cfc1d9c2057b4714177d9
-
SSDEEP
3072:8d/no+Yfl70Pu3om6Xgl+CbJYh4tFDtwVYj2MXziOfEgdsyN:O/o+zhmt+5SFp7tLMgdX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118
Files
-
0eaa38ff4429df0ebc87e23af4f6948b_JaffaCakes118.exe windows:5 windows x86 arch:x86
159b4ee1b0ff368d3820f78ea571a220
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetWriteFile
InternetOpenA
asycwser
_Xbig
_Stod
_Strxfrm
_FDscale
_Eps
_LSnan
_FRteps
_LCosh
kernel32
CreateProcessA
GetCurrentThreadId
CreateThread
lstrlenW
SetThreadAffinityMask
TerminateThread
GlobalAlloc
CreateFileMappingW
ReleaseMutex
VirtualQueryEx
GetProcAddress
lstrcpyA
lstrcpynA
UnmapViewOfFile
GlobalFree
RtlUnwind
DeleteFileA
MapViewOfFile
RaiseException
MultiByteToWideChar
GetCurrentThread
GetSystemTime
GetCommandLineW
GetFileAttributesW
GlobalLock
TerminateProcess
GetModuleHandleA
GetTempPathA
CloseHandle
GetDateFormatA
WaitForMultipleObjects
QueryPerformanceCounter
UnhandledExceptionFilter
Sleep
LoadResource
ReadFile
GetVolumeInformationA
comdlg32
ChooseFontA
FindTextA
user32
SystemParametersInfoA
SetRectEmpty
GetMenuState
SendMessageW
DrawIconEx
EnumWindows
DrawTextW
FindWindowExA
DrawFrameControl
DrawTextA
CharUpperBuffW
SetMenu
DestroyCursor
GetKeyNameTextW
CharUpperA
GetScrollRange
NotifyWinEvent
ReleaseCapture
MapWindowPoints
GetWindowPlacement
CopyImage
GetDCEx
IsCharAlphaA
RegisterClipboardFormatA
CharLowerBuffA
InsertMenuA
GetDoubleClickTime
GetScrollInfo
CreatePopupMenu
EnableScrollBar
SetWindowPlacement
GetCursorPos
CharLowerBuffW
PostQuitMessage
DrawFocusRect
SetKeyboardState
TranslateMessage
GetWindowRect
GetMessageTime
ShowCaret
CreateMenu
ActivateKeyboardLayout
oleaut32
SafeArrayDestroy
SafeArrayCreateVector
SafeArrayPutElement
CreateErrorInfo
gdi32
GetTextMetricsA
BitBlt
SetTextColor
CreateBrushIndirect
CreateBitmap
StartDocA
GdiFlush
CreateFontIndirectA
CreateDIBitmap
SelectClipRgn
GetTextExtentPoint32A
PlayEnhMetaFile
SetWindowExtEx
GetRandomRgn
GetTextExtentPointA
SetEnhMetaFileBits
DeleteEnhMetaFile
CreatePen
SetROP2
GetNearestPaletteIndex
RealizePalette
SetPixelV
CreateCompatibleDC
Pie
CreateHalftonePalette
ole32
CoCreateInstance
CoGetClassObject
CoTaskMemFree
CoInitialize
IsEqualGUID
CoUninitialize
CoTaskMemAlloc
OleSetClipboard
shell32
SHBrowseForFolderA
comctl32
ImageList_Create
ImageList_GetImageCount
Sections
.text Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ