Static task
static1
Behavioral task
behavioral1
Sample
21d175eeac40b9fc16a1ff9126fc69ea_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
21d175eeac40b9fc16a1ff9126fc69ea_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
21d175eeac40b9fc16a1ff9126fc69ea_JaffaCakes118
-
Size
20KB
-
MD5
21d175eeac40b9fc16a1ff9126fc69ea
-
SHA1
af882db59eecaacdd5f82877f0760c58ea5a9c53
-
SHA256
a9a7ce300bc2d617848a38c9351de1179a01bc7b3601daf55345a793e8c94c81
-
SHA512
d8547fa513a37698727594414121cd126c94fc6d4ce78f88ef7b7de429ad367e6dd59d2d6cd99177191e7faeb393c42cca19571a67096c42f7a8e51cb327485b
-
SSDEEP
384:06qrc2HtmWjHJULFVrdZDeVR1CVyCL9ZVm8xkMuKpGyuKpGy:D4cQtmWjHJez21CVjpP4G4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 21d175eeac40b9fc16a1ff9126fc69ea_JaffaCakes118
Files
-
21d175eeac40b9fc16a1ff9126fc69ea_JaffaCakes118.exe windows:4 windows x86 arch:x86
50f4b1ccc7ac837af8dacd9161cbf4e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
GetACP
InterlockedDecrement
SetFilePointer
GetLocalTime
VirtualFree
GlobalReAlloc
GetVersion
CreateFileA
GetCommandLineA
LockResource
TlsGetValue
InterlockedIncrement
VirtualQuery
GetModuleFileNameA
VirtualProtect
RaiseException
GetProcAddress
DeleteCriticalSection
EnterCriticalSection
ReadFile
GetCPInfo
WideCharToMultiByte
VirtualAlloc
LocalAlloc
LocalAlloc
GetVersionExA
CloseHandle
FindClose
GlobalReAlloc
EnterCriticalSection
GetProcAddress
SetEndOfFile
GetLastError
LeaveCriticalSection
VirtualAlloc
lstrcpyA
GetStringTypeExA
CompareStringA
FindFirstFileA
GlobalUnlock
EnumCalendarInfoA
GetProcAddress
lstrcpynA
GetCurrentProcessId
GetDiskFreeSpaceA
GetVersion
WaitForSingleObject
GetModuleHandleA
GetLocaleInfoA
TlsSetValue
GetTickCount
ExitProcess
WriteFile
GlobalLock
GlobalFree
LoadLibraryA
LeaveCriticalSection
FormatMessageA
GetThreadLocale
FreeResource
GetStartupInfoA
ResetEvent
InterlockedExchange
lstrlenA
SetErrorMode
user32
ShowWindow
SetWindowPlacement
IsDialogMessageA
FrameRect
WaitMessage
MapWindowPoints
GetLastActivePopup
CallWindowProcA
SetActiveWindow
GetSysColor
DrawMenuBar
SetTimer
IsWindow
GetClassInfoA
CreateWindowExA
OffsetRect
GetMenuItemID
CreateIcon
ScrollWindow
GetSystemMetrics
DrawIcon
SetWindowPos
IsIconic
GetActiveWindow
WinHelpA
MessageBoxA
GetKeyState
CharLowerA
RemovePropA
GetScrollInfo
DestroyCursor
SetForegroundWindow
GetWindowLongA
SetWindowLongA
InvalidateRect
FillRect
TrackPopupMenu
KillTimer
GetDC
GetKeyboardLayoutList
CharNextA
ReleaseCapture
GetWindow
DefMDIChildProcA
SetClassLongA
GetSystemMenu
DrawFrameControl
SetScrollInfo
InsertMenuA
DrawTextA
IsChild
FindWindowA
ShowOwnedPopups
GetClassNameA
LoadBitmapA
UpdateWindow
LoadStringA
GetCursorPos
LoadKeyboardLayoutA
GetForegroundWindow
GetKeyboardType
OemToCharA
GetKeyboardLayout
LoadStringA
PostQuitMessage
PostMessageA
CharToOemA
GetKeyNameTextA
AdjustWindowRectEx
PeekMessageA
GetIconInfo
ActivateKeyboardLayout
GetFocus
WindowFromPoint
LoadIconA
GetClientRect
TranslateMessage
LoadCursorA
TranslateMDISysAccel
SetCapture
GetDCEx
ShowCursor
IntersectRect
EnableWindow
SetWindowsHookExA
EnableScrollBar
SetScrollPos
GetWindowRect
SetMenuItemInfoA
DestroyIcon
GetScrollPos
RegisterClipboardFormatA
CharNextA
SystemParametersInfoA
IsRectEmpty
EqualRect
DefFrameProcA
ScreenToClient
GetMenuStringA
CheckMenuItem
MessageBoxA
MapVirtualKeyA
GetWindowTextA
DestroyWindow
SetCursor
GetSubMenu
gdi32
CreateCompatibleBitmap
SelectObject
GetPixel
CreatePalette
SetROP2
LineTo
GetBrushOrgEx
UnrealizeObject
RestoreDC
GetDIBits
CreateDIBSection
SetBkMode
GetTextExtentPoint32A
DeleteDC
SetTextColor
MaskBlt
GetClipBox
BitBlt
SaveDC
GetDeviceCaps
CreateDIBitmap
SetBrushOrgEx
GetSystemPaletteEntries
CreateSolidBrush
ExcludeClipRect
StretchBlt
RectVisible
GetDCOrgEx
CreateBrushIndirect
GetObjectA
CreateFontIndirectA
SetDIBColorTable
CreatePenIndirect
SetStretchBltMode
IntersectClipRect
DeleteObject
SetWindowOrgEx
MoveToEx
GetPaletteEntries
Sections
ksjfaf Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ewrups Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE