Static task
static1
Behavioral task
behavioral1
Sample
15bead59cf905ca8fd9e35df98e0b4a3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
15bead59cf905ca8fd9e35df98e0b4a3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
15bead59cf905ca8fd9e35df98e0b4a3_JaffaCakes118
-
Size
39KB
-
MD5
15bead59cf905ca8fd9e35df98e0b4a3
-
SHA1
4d99f365470a4d21046a5311a1e0eb9a8f956e3d
-
SHA256
8ff5ddaa5cbe9a68c5179bc031b408bddd83890cd48028216bbc9b7be53bb39a
-
SHA512
ef4c8f7801b1bbbf45e5c0ce9436b74b6201e4bb6cededbd9f9c093a8f2e14385760dd44ee7fe7eff379959b365bae0c548c84b2b717df73756e19dda8fa0552
-
SSDEEP
768:FoxS4NbQq33RKV22CxZASh9NiOxxjqVh/:Fo84FZIo2GZASh90yxjqVh/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15bead59cf905ca8fd9e35df98e0b4a3_JaffaCakes118
Files
-
15bead59cf905ca8fd9e35df98e0b4a3_JaffaCakes118.exe windows:8 windows x86 arch:x86
6ab3add28c0aa4e5490998f53ba1e7fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateBitmap
GetDeviceCaps
PatBlt
GetTextMetricsW
SelectObject
DeleteDC
CreateBitmap
SetBkMode
GetObjectW
SetBkMode
GetTextMetricsW
DeleteObject
DeleteDC
SetTextColor
DeleteDC
SetBkColor
GetTextMetricsW
GetTextExtentPoint32W
CreateBitmap
SetBkColor
TextOutW
TextOutW
GetTextExtentPoint32W
CreateCompatibleDC
GetObjectW
BitBlt
LineTo
DeleteObject
PatBlt
BitBlt
GetDeviceCaps
DeleteObject
GetDeviceCaps
DeleteDC
DeleteObject
GetStockObject
GetStockObject
PatBlt
GetObjectW
CreateCompatibleBitmap
SetTextColor
CreateCompatibleBitmap
LineTo
GetStockObject
SetBkMode
ExtTextOutW
MoveToEx
DeleteDC
DeleteDC
GetDeviceCaps
CreateCompatibleBitmap
GetStockObject
PatBlt
GetTextExtentPoint32W
TextOutW
CreateBitmap
BitBlt
DeleteObject
CreateCompatibleDC
kernel32
GetModuleFileNameA
CreateFileW
WideCharToMultiByte
lstrcpyW
UnhandledExceptionFilter
GetModuleFileNameA
lstrcpyW
HeapAlloc
GetModuleHandleW
ReadFile
CloseHandle
InterlockedDecrement
WideCharToMultiByte
LocalAlloc
QueryPerformanceCounter
MultiByteToWideChar
LocalFree
GetModuleHandleA
LeaveCriticalSection
SetLastError
WideCharToMultiByte
FormatMessageW
ReadFile
GetModuleHandleA
GetProcessHeap
SleepEx
GetStartupInfoW
CreateFileW
HeapReAlloc
VirtualAllocEx
QueryPerformanceCounter
HeapReAlloc
WriteFile
SetFilePointer
GetCurrentProcess
Sleep
GetCurrentProcessId
LocalFree
LoadLibraryA
LoadLibraryW
CloseHandle
WaitForSingleObject
lstrcmpiW
HeapFree
InterlockedDecrement
GetProcessHeap
MultiByteToWideChar
InitializeCriticalSection
CreateThread
TerminateProcess
DeleteCriticalSection
WaitForSingleObject
FormatMessageW
GetStartupInfoA
GetProcessHeap
GetModuleHandleA
WideCharToMultiByte
GetModuleFileNameA
GetProcAddress
ExitProcess
GetModuleHandleA
HeapAlloc
user32
GetSystemMetrics
SendMessageW
GetSystemMetrics
GetDlgItemTextW
PeekMessageW
IsIconic
GetMessageW
WinHelpW
GetDlgCtrlID
wsprintfA
GetSysColor
PostQuitMessage
LoadIconW
GetKeyboardState
MapWindowPoints
EnableMenuItem
GetParent
DestroyWindow
IsDlgButtonChecked
GetMessageW
wsprintfW
CreateWindowExW
IsDialogMessageW
ReleaseCapture
GetDC
PeekMessageW
UpdateWindow
CreateWindowExW
SetCursor
DialogBoxParamW
MapWindowPoints
GetClientRect
EnableMenuItem
GetDlgItem
GetDlgItem
BeginPaint
LoadStringW
ReleaseDC
MapWindowPoints
SetWindowTextW
CallWindowProcW
CreateWindowExW
PostQuitMessage
WinHelpW
BeginPaint
DefWindowProcW
ShowWindow
DispatchMessageW
ScreenToClient
ScreenToClient
FindWindowW
GetFocus
PtInRect
PtInRect
DestroyWindow
CopyRect
GetSystemMenu
GetDlgCtrlID
PostMessageW
SendDlgItemMessageW
CreateDialogParamW
FillRect
SetForegroundWindow
SetDlgItemTextW
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ