Static task
static1
Behavioral task
behavioral1
Sample
14f75b49fcacf2e30406d28098eedc11_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
14f75b49fcacf2e30406d28098eedc11_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
14f75b49fcacf2e30406d28098eedc11_JaffaCakes118
-
Size
768KB
-
MD5
14f75b49fcacf2e30406d28098eedc11
-
SHA1
a38afa0c371ccb7c993580bea9520f494ad1364d
-
SHA256
2d3d5b568ac9b665d970ea194a859ec75763ec223d16cb191514e9a2b379f132
-
SHA512
28ebf5f8ce762d07d96271ca9d04a756dd932565cc500fe6b2e5685109f4422244321ad18250e637841ec9cae3a4d0f4013058b10cb5b958950fc35a362252ee
-
SSDEEP
12288:bup+0F8FfWhz5ie+ozzjrJmlvTUNc3tKODNKh2qpgM/mDNyTgsBvfSHq7a03bw:bup+0FQZGzj1mtUNc3DmTENegsIHq74
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14f75b49fcacf2e30406d28098eedc11_JaffaCakes118
Files
-
14f75b49fcacf2e30406d28098eedc11_JaffaCakes118.exe windows:4 windows x86 arch:x86
1b7e0de9721abc47ba5bf601f8e00907
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetMapMode
Rectangle
CreateSolidBrush
DeleteObject
Polygon
RealizePalette
GetTextFaceA
CreateCompatibleBitmap
RectVisible
Arc
SetWindowExtEx
GetDIBits
GetNearestPaletteIndex
RectInRegion
ExtSelectClipRgn
Polyline
GetWindowExtEx
OffsetViewportOrgEx
RoundRect
SetPixel
GetRegionData
GetBkColor
SetBkMode
CreateFontIndirectA
GetDCOrgEx
oleaut32
LoadTypeLi
advapi32
DeleteService
RegisterServiceCtrlHandlerA
OpenServiceA
RegQueryValueExA
CloseServiceHandle
SetServiceStatus
kernel32
VirtualQuery
CompareStringA
GetTickCount
GetCurrentProcess
TlsFree
GetDateFormatA
GetFileType
GetCPInfo
MultiByteToWideChar
HeapCreate
RtlUnwind
WriteConsoleW
CompareStringW
CreateFileA
TerminateProcess
LCMapStringW
GetEnvironmentStrings
Sleep
InterlockedIncrement
WideCharToMultiByte
GetCurrentProcessId
TlsGetValue
GetStdHandle
WriteConsoleA
HeapSize
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetVersionExA
HeapFree
GetStringTypeA
IsValidCodePage
GetModuleFileNameA
SetFilePointer
GetOEMCP
LoadLibraryA
SetUnhandledExceptionFilter
InterlockedExchange
GetProcessHeap
GetConsoleMode
ExitProcess
GetLastError
WriteFile
GetProcAddress
GetStartupInfoA
DeleteCriticalSection
VirtualFree
InterlockedDecrement
TlsSetValue
GetACP
GetCommandLineA
TlsAlloc
GetLocaleInfoA
LCMapStringA
InitializeCriticalSection
SetStdHandle
SetHandleCount
UnhandledExceptionFilter
HeapReAlloc
LeaveCriticalSection
GetEnvironmentStringsW
HeapDestroy
IsDebuggerPresent
GetStringTypeW
GetCurrentThreadId
CloseHandle
SetEnvironmentVariableA
ReadFile
SetLastError
GetTimeFormatA
GetConsoleOutputCP
EnterCriticalSection
RaiseException
GetModuleHandleA
HeapAlloc
FreeEnvironmentStringsA
GetTimeZoneInformation
GetConsoleCP
VirtualAlloc
FreeEnvironmentStringsW
FlushFileBuffers
CreateMutexA
comctl32
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Destroy
ImageList_Draw
ImageList_BeginDrag
CreatePropertySheetPageA
ImageList_AddMasked
ImageList_ReplaceIcon
user32
wsprintfA
GetWindowTextLengthA
SetWindowsHookExA
CheckMenuItem
SetWindowPos
LoadImageA
SendMessageA
MessageBoxA
GetMenuItemID
UnregisterClassA
GetCursorPos
CopyIcon
LoadBitmapA
RemoveMenu
IsWindow
PostMessageA
SetRectEmpty
GetWindowTextA
DestroyCursor
DeleteMenu
LoadIconA
SetPropA
ReleaseDC
GetWindowPlacement
AppendMenuA
GetPropA
GetSubMenu
ShowCaret
DestroyWindow
RegisterClassExA
GetClipboardData
SetMenu
GetFocus
CreateIconIndirect
CopyAcceleratorTableA
GetSystemMetrics
DestroyIcon
GetMenu
DrawFrameControl
LoadAcceleratorsA
GetClassNameA
PeekMessageA
SetClipboardData
GetSysColor
DrawFocusRect
LoadStringA
SetDlgItemTextA
InvalidateRgn
KillTimer
ClientToScreen
GetDC
LoadCursorA
SetMenuDefaultItem
RegisterClassA
SetWindowLongA
GetClassInfoExA
WinHelpA
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 472KB - Virtual size: 471KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ