Static task
static1
Behavioral task
behavioral1
Sample
17bc2bc15bbea90f16871f539a0605b1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17bc2bc15bbea90f16871f539a0605b1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
17bc2bc15bbea90f16871f539a0605b1_JaffaCakes118
-
Size
85KB
-
MD5
17bc2bc15bbea90f16871f539a0605b1
-
SHA1
1eb01532db624bb6fd594af6e2d7f21f84cb7c12
-
SHA256
d5393724d1556b911735b782828296bd2b2d4d642f2e8caef9ff4d48d42dfc90
-
SHA512
813e5c85e9217a34a305f35b83465e2f814fcacd5ba2199749b6ee1dabd9209cef6022829682d1e53d8fcc71c577d40881e86833214a492a14921da81b427d97
-
SSDEEP
1536:wBXhDyM5k0iPx2I4w/NnuMgHHoRkDUJ4VVZoslpV08R:2yMZNXBzHG4jlD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17bc2bc15bbea90f16871f539a0605b1_JaffaCakes118
Files
-
17bc2bc15bbea90f16871f539a0605b1_JaffaCakes118.exe windows:1 windows x86 arch:x86
6f8b59d3dd7813eb7f69e5bb044a0ff8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
comdlg32
PrintDlgA
GetOpenFileNameA
GetSaveFileNameA
gdi32
Arc
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectA
CreateHatchBrush
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
ExtFloodFill
GetCurrentObject
GetCurrentPositionEx
GetDeviceCaps
GetDIBits
GetObjectA
GetPixel
GetStockObject
GetTextExtentPoint32A
GetTextMetricsA
LineTo
MoveToEx
Pie
Polygon
Polyline
RoundRect
SelectObject
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBits
SetPixelV
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
StretchBlt
TextOutA
CreateFontA
kernel32
CloseHandle
CreateFileA
CreateThread
EnumResourceNamesA
ExitProcess
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetFileSize
GetFileType
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalReAlloc
MultiByteToWideChar
ReadFile
SetCurrentDirectoryA
SetEndOfFile
SetErrorMode
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteFile
RtlMoveMemory
ole32
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoUninitialize
ProgIDFromCLSID
oleaut32
GetActiveObject
SafeArrayCreate
SysAllocStringByteLen
SysFreeString
SysStringByteLen
VariantClear
VariantCopy
user32
AttachThreadInput
BeginPaint
CheckRadioButton
ClientToScreen
CreateDialogIndirectParamA
CreateDialogParamA
CreateMenu
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DeleteMenu
DestroyIcon
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
DrawMenuBar
EnableWindow
EndPaint
FillRect
GetClientRect
GetDC
GetDesktopWindow
GetDlgItem
GetForegroundWindow
GetMenu
GetMenuItemInfoA
GetSysColor
GetSysColorBrush
GetWindowLongA
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
InsertMenuItemA
InvalidateRect
IsDialogMessageA
IsWindow
LoadCursorA
LoadIconA
LoadImageA
MapDialogRect
MessageBoxA
PeekMessageA
PostMessageA
RedrawWindow
RegisterClassExA
ReleaseDC
ScreenToClient
SendMessageA
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
SystemParametersInfoA
TranslateMessage
UpdateWindow
DialogBoxParamA
GetWindow
KillTimer
SetTimer
PostQuitMessage
comctl32
ImageList_ReplaceIcon
ImageList_Remove
ImageList_GetIcon
ImageList_LoadImageA
Sections
.text Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ