Static task
static1
Behavioral task
behavioral1
Sample
15bcb28ef9bf45652c033f08bd73072d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
15bcb28ef9bf45652c033f08bd73072d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15bcb28ef9bf45652c033f08bd73072d_JaffaCakes118
-
Size
208KB
-
MD5
15bcb28ef9bf45652c033f08bd73072d
-
SHA1
82c9cc5fa7d6c026f6040d54af773301f0f8f254
-
SHA256
ad268bacaa691ca1442150c8560991e2ed1a85651e90bba16d4e470c76dc390f
-
SHA512
43164b900a16b90bab7d614f9d6ba6343e5864e64d17ebca1eac545da4af8490258024a4c1185213969092b7f0edda9c0fd983b3fd989d1b08a1bba41c41a913
-
SSDEEP
3072:eCF4y1SipLT4sppzjxg67YjTQRWqwPbBXnfsglU0fBZwr73ZYxAo/FtC1TN:jCyl/NjxgoYjTQ+PbBPrZMr1TN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15bcb28ef9bf45652c033f08bd73072d_JaffaCakes118
Files
-
15bcb28ef9bf45652c033f08bd73072d_JaffaCakes118.exe windows:4 windows x86 arch:x86
77be15ec75bc73b036100f563d16d4b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFindExtensionW
SHGetValueW
PathStripToRootW
PathIsUNCW
SHSetValueW
PathFileExistsW
PathAppendW
PathFindFileNameW
wininet
InternetConnectW
InternetCloseHandle
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetOpenUrlW
InternetOpenW
kernel32
DeleteCriticalSection
TlsFree
GetVersionExA
LoadLibraryA
CompareStringW
GlobalFindAtomW
GlobalFlags
WritePrivateProfileStringW
GetModuleHandleA
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
GetFileType
HeapReAlloc
RtlUnwind
RaiseException
ExitProcess
HeapSize
LocalReAlloc
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
InterlockedIncrement
FileTimeToSystemTime
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GetThreadLocale
GetCurrentProcessId
GlobalAddAtomW
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryW
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
GlobalDeleteAtom
GetModuleHandleW
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
CreateProcessW
GetLastError
CreateMutexW
GetVersionExW
SetLastError
WaitForSingleObject
WideCharToMultiByte
lstrcmpiW
LockResource
CreateThread
GetModuleFileNameW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
Sleep
CreateDirectoryW
CloseHandle
ReadFile
CreateFileW
SetUnhandledExceptionFilter
user32
DestroyMenu
UnregisterClassW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ClientToScreen
ShowWindow
SetWindowTextW
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
UnhookWindowsHookEx
LoadCursorW
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowTextW
CharUpperW
GetSystemMetrics
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
PostMessageW
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
SendMessageW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
wsprintfW
IsIconic
UnregisterClassA
gdi32
DeleteDC
GetStockObject
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
RestoreDC
SaveDC
DeleteObject
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
SetMapMode
ScaleWindowExtEx
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
SHGetSpecialFolderPathW
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ