Static task
static1
Behavioral task
behavioral1
Sample
2143018efc45eab281b1d3e0784cb463_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2143018efc45eab281b1d3e0784cb463_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
2143018efc45eab281b1d3e0784cb463_JaffaCakes118
-
Size
216KB
-
MD5
2143018efc45eab281b1d3e0784cb463
-
SHA1
25865ed592897810e90f740686b15abd9e16e7f9
-
SHA256
e4d514a5918e9f458c0a5dab2da9c46f12dafdd6df03fd8b72b4d9c5abd34706
-
SHA512
b4f97fd5ef184804a23eef35dc6d0a25b96d31fe0d8a251037a093ce71cc27835fa6db9279dc9b9bd522e0fd71bbd43128990482ef2e900f313f50a91683a595
-
SSDEEP
3072:8a79mlXPMnKmOPmr0pMdqkEsTRg88KtnPib7NdMeQwShQiicVu7wbd6:ioemCuAsTRg88Xb7obhEcgmd6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2143018efc45eab281b1d3e0784cb463_JaffaCakes118
Files
-
2143018efc45eab281b1d3e0784cb463_JaffaCakes118.exe windows:5 windows x86 arch:x86
e4b80d65be261e860398534f9694c030
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetComputerNameA
GetLocalTime
OutputDebugStringA
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
GetTickCount
GetPrivateProfileIntA
lstrcmpA
InterlockedIncrement
CloseHandle
GetExitCodeThread
WaitForMultipleObjects
CreateThread
CreateEventA
GetCommandLineA
lstrcpynA
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
ExitProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsFree
SetLastError
GetCurrentThreadId
TlsSetValue
TlsGetValue
Sleep
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
GetLocaleInfoA
SetFilePointer
VirtualProtect
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
RtlUnwind
SetStdHandle
ReadFile
FlushFileBuffers
_llseek
_lwrite
GetModuleFileNameA
GetPrivateProfileStringA
lstrcmpiA
lstrcatA
WritePrivateProfileStringA
OpenFile
_lclose
FreeLibrary
LoadLibraryA
GetProcAddress
lstrcpyA
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
lstrlenA
TlsAlloc
gdi32
GetTextColor
SetBkColor
CreateSolidBrush
GetTextMetricsA
SetTextColor
ExtTextOutA
CreatePen
SelectObject
Rectangle
GetObjectA
CreateFontIndirectA
DeleteObject
GetStockObject
user32
SetWindowTextA
wsprintfA
CheckDlgButton
CheckRadioButton
MessageBoxA
GetWindowTextA
IsDlgButtonChecked
GetWindowTextLengthA
DestroyMenu
TrackPopupMenu
GetCursorPos
AppendMenuA
CreatePopupMenu
PostMessageA
LoadBitmapA
CreateWindowExA
EnableMenuItem
GetMenu
InvalidateRect
CharLowerBuffA
wvsprintfA
UpdateWindow
GetSystemMetrics
GetWindowPlacement
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageA
GetAsyncKeyState
DeleteMenu
DrawMenuBar
GetSubMenu
GetMenuStringA
GetMenuItemCount
BeginPaint
GetClientRect
ShowWindow
MoveWindow
GetSysColor
GetSystemMenu
DestroyWindow
GetWindowRect
CloseWindow
DefWindowProcA
PostQuitMessage
RegisterClassA
LoadIconA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadMenuA
UnregisterClassA
ReleaseDC
GetDC
SetScrollRange
GetWindowLongA
ScrollWindow
SetWindowLongA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetScrollPos
GetScrollRange
SetCapture
ReleaseCapture
GetKeyState
LoadCursorA
DrawIcon
CheckMenuItem
DialogBoxParamA
EndDialog
GetDlgItem
SendMessageA
EnableWindow
SetFocus
EndPaint
kato
KatoSetLogFunction
comctl32
ImageList_Create
ImageList_Destroy
CreateToolbarEx
ord17
ImageList_Add
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
ChooseFontA
ole32
CoUninitialize
CoInitializeEx
shell32
DragQueryFileA
DragAcceptFiles
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE