Static task
static1
Behavioral task
behavioral1
Sample
1b66273bd0dd8609560874c561fe2443_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b66273bd0dd8609560874c561fe2443_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1b66273bd0dd8609560874c561fe2443_JaffaCakes118
-
Size
228KB
-
MD5
1b66273bd0dd8609560874c561fe2443
-
SHA1
1656d5081f7cf7814df30ccc37a8b4dbbc27b566
-
SHA256
accfe2b17895c67322f71692189a45c3d2e547976f2d664b2053f0831dffe46e
-
SHA512
9b634d305f715cdcb5615bea35a7080978f39bafe28f1ced006deaf85827c59dc2facacf36256635e46b926ae1c629f63a2fe54db769b4722e3a64968e10cba6
-
SSDEEP
3072:AdgdLHfiIUIXXU3MgvtgTw8IdZeKe573UJLLIXXjv/ms:AdoLHKIUoIMg0wteFEJiLr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b66273bd0dd8609560874c561fe2443_JaffaCakes118
Files
-
1b66273bd0dd8609560874c561fe2443_JaffaCakes118.exe windows:5 windows x86 arch:x86
0c7fad5ff0421daabc76807c61894996
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
_TrackMouseEvent
shlwapi
StrToInt64ExW
msimg32
AlphaBlend
wininet
InternetReadFile
InternetCloseHandle
HttpEndRequestW
HttpOpenRequestW
InternetAttemptConnect
HttpSendRequestW
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
InternetCheckConnectionW
kernel32
DeleteFileW
ResumeThread
SetFileAttributesW
CreateThread
ExpandEnvironmentStringsW
GetModuleHandleW
GetModuleFileNameW
GlobalReAlloc
IsBadReadPtr
DosDateTimeToFileTime
SystemTimeToFileTime
GetCurrentProcess
SetFileTime
GetCurrentDirectoryW
GetFileType
CreateFileA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
RtlUnwind
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
SetHandleCount
GetModuleFileNameA
GetStdHandle
HeapReAlloc
VirtualAlloc
EnterCriticalSection
FindNextFileW
CreateEventW
FindClose
GetLastError
GetTempPathW
MultiByteToWideChar
TerminateProcess
Sleep
WideCharToMultiByte
GetSystemDirectoryW
WriteFile
GetTickCount
WaitForSingleObject
CreateDirectoryW
CreateProcessW
SetFilePointer
FindFirstFileW
GetTempFileNameW
ExitProcess
CloseHandle
GlobalFree
GlobalUnlock
CreateFileW
ReadFile
GlobalAlloc
GlobalLock
GetFileSize
GetCommandLineW
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
GetProcAddress
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
user32
FillRect
GetPropW
SendMessageW
SetWindowPos
ReleaseDC
GetDCEx
InvalidateRect
GetDC
SetPropW
DrawIconEx
DrawTextW
PostMessageW
GetWindowRect
DestroyWindow
GetNextDlgTabItem
GetMessageW
UnregisterClassW
GetParent
IsWindowEnabled
SetFocus
GetClassInfoExW
wsprintfW
GetUpdateRect
TranslateMessage
RegisterClassExW
SystemParametersInfoW
EnumChildWindows
DefWindowProcW
CreateWindowExW
UpdateWindow
EnableWindow
DispatchMessageW
ShowWindow
LoadImageW
GetIconInfo
SetRect
EndPaint
SetCursor
PostQuitMessage
GetClientRect
BeginPaint
GetForegroundWindow
LoadIconW
GetWindowLongW
SetWindowLongW
CopyRect
SetWindowRgn
LoadCursorW
InflateRect
IsWindow
MessageBoxW
CallWindowProcW
gdi32
CreateDIBitmap
GetTextExtentPoint32W
CreateFontIndirectW
GetDeviceCaps
GetDIBits
CombineRgn
ExtCreateRegion
SaveDC
SetDIBits
GetCurrentPositionEx
GetStockObject
GetTextColor
RestoreDC
StretchBlt
GetObjectW
MoveToEx
BitBlt
LineTo
SetTextColor
SetBkMode
CreateCompatibleBitmap
GetTextExtentPointW
CreateFontW
DeleteDC
CreateDIBSection
CreateDCW
DeleteObject
SelectObject
CreateCompatibleDC
Rectangle
CreatePen
RoundRect
CreateSolidBrush
advapi32
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegOpenKeyExW
RegDeleteValueW
shell32
CommandLineToArgvW
SHGetFolderPathW
SHGetPathFromIDListW
ShellExecuteW
SHGetMalloc
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
OleLoadPicture
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE