Static task
static1
Behavioral task
behavioral1
Sample
19d6727ab48ca58140942c3105355054_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19d6727ab48ca58140942c3105355054_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
19d6727ab48ca58140942c3105355054_JaffaCakes118
-
Size
300KB
-
MD5
19d6727ab48ca58140942c3105355054
-
SHA1
c2dc545b1548aa20ac11076453cb5a54bffd32b7
-
SHA256
6d490a6eb42ae4da61e181053d9e270f06de0e52b5b12d611ff54bdd068b321c
-
SHA512
a981c730d63b19de8179e28a87f2fa9b092038d5ad5992d1bf95c1f7a41ef880f9ba64c63122d85dea4606d06363c87c6860cd533c4eb7df732bba8e1f33382b
-
SSDEEP
6144:JxIpcEKxkKCyB+njnAHhbnePpONHthL3wwU5B:gKCyEjnObnePpaHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d6727ab48ca58140942c3105355054_JaffaCakes118
Files
-
19d6727ab48ca58140942c3105355054_JaffaCakes118.exe windows:5 windows x86 arch:x86
06da7cad26fa83a3c4b26ccf21bc7b9f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
LoadLibraryExA
GetModuleHandleA
Sleep
Process32Next
TerminateProcess
OpenProcess
CloseHandle
Process32First
CreateToolhelp32Snapshot
GetVersionExA
CreateThread
GetProcAddress
ExitProcess
GetCurrentProcessId
WriteProcessMemory
OutputDebugStringW
CreateProcessA
GetEnvironmentVariableW
WaitForSingleObject
CreateEventA
SetUnhandledExceptionFilter
DeleteFileA
GetSystemDirectoryA
CreateProcessW
CreateFileW
WriteFile
CreateFileA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
FindResourceA
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
FatalAppExitA
SizeofResource
HeapCreate
HeapSize
HeapReAlloc
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
UnhandledExceptionFilter
RtlUnwind
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualProtect
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
InterlockedExchange
GetCPInfo
LoadResource
FreeLibrary
GlobalAlloc
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
FlushFileBuffers
GlobalLock
GlobalUnlock
GetModuleFileNameA
MulDiv
lstrcmpA
GetEnvironmentStringsW
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
SetLastError
GetCurrentThreadId
GetTickCount
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
RaiseException
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapDestroy
SetHandleCount
user32
GetMenuItemCount
AppendMenuA
DestroyMenu
CreatePopupMenu
DefFrameProcA
LoadStringW
PostQuitMessage
SetMenuDefaultItem
GetMenuItemInfoA
SetMenuItemInfoA
SystemParametersInfoA
GetScrollInfo
SetScrollPos
ScrollWindowEx
UpdateWindow
TranslateMDISysAccel
wsprintfA
RemoveMenu
GetProcessWindowStation
GetUserObjectInformationA
CloseWindowStation
GetWindowRect
MapWindowPoints
FindWindowExW
SetScrollInfo
KillTimer
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetMonitorInfoA
MonitorFromPoint
TrackPopupMenuEx
UnregisterClassA
PtInRect
GetSubMenu
GetMenuStringA
DrawMenuBar
IsWindowVisible
DefMDIChildProcA
LoadStringA
LoadMenuA
LoadAcceleratorsA
CreateAcceleratorTableA
AdjustWindowRectEx
FindWindowA
IsWindow
SendMessageA
GetDesktopWindow
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
BeginPaint
EndPaint
CallWindowProcA
FillRect
ReleaseCapture
GetClassNameA
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
MoveWindow
GetSysColor
LoadImageA
DestroyWindow
CharNextA
DefWindowProcA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
ShowWindow
GetWindowLongA
CreateWindowExA
RegisterClassExA
TranslateAcceleratorA
LoadCursorA
GetClassInfoExA
SetTimer
PostMessageA
SetWindowLongA
BringWindowToTop
MessageBeep
gdi32
SetViewportOrgEx
GetStockObject
GetObjectA
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
advapi32
RegOpenKeyExA
RegQueryInfoKeyA
CreateProcessAsUserA
OpenProcessToken
RegOpenKeyA
RegQueryValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatusEx
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
ole32
OleInitialize
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
oleaut32
SysStringLen
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VariantClear
VariantInit
VarUI4FromStr
SysAllocString
SysAllocStringLen
SysFreeString
comctl32
InitCommonControlsEx
iphlpapi
GetAdaptersInfo
psapi
GetProcessMemoryInfo
wininet
HttpQueryInfoA
InternetConnectA
InternetSetOptionA
HttpSendRequestA
InternetOpenA
InternetReadFile
HttpOpenRequestA
InternetCloseHandle
Sections
.text Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ