Static task
static1
Behavioral task
behavioral1
Sample
226b9ca74647f8dd953d8776dc3a004a_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
226b9ca74647f8dd953d8776dc3a004a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
226b9ca74647f8dd953d8776dc3a004a_JaffaCakes118
-
Size
552KB
-
MD5
226b9ca74647f8dd953d8776dc3a004a
-
SHA1
c6dc67e13c491ad0ad65ee2cb028544dfe82a71f
-
SHA256
1f1d3f34ad1c8fa664fd6954dffeb1ba547054f83e81ca8ab9cbbb6c22aeab8c
-
SHA512
18c52a76414f29a7556e4403340b57089f282c1daba7374eb153716aea5eb1abfd53d2ee7146b807dcab22ef3158de30acba9cd902a639c92f1622a14a6c59f4
-
SSDEEP
12288:Drkxu82y0/7dYIVzUD1QVqIzfvjjO+ALjwlMTfXJmsv/f43n2rto:Dwu82y0/RYIlNzvO+A3wOJm4o3n2rt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 226b9ca74647f8dd953d8776dc3a004a_JaffaCakes118
Files
-
226b9ca74647f8dd953d8776dc3a004a_JaffaCakes118.exe windows:5 windows x86 arch:x86
a154df3651bff50a265dedacefd3b2cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpynA
CloseHandle
LoadLibraryExW
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
SizeofResource
CreateProcessW
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GetUserDefaultLCID
WaitForMultipleObjects
FindFirstFileW
CreateFileMappingA
CompareStringA
GetDiskFreeSpaceA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GlobalLock
DeleteFileW
GetCPInfo
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
GetACP
GetVersion
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
FindNextFileA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
InitializeCriticalSection
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
lstrcmpiA
GetTempPathA
SetStdHandle
GetLocaleInfoW
lstrcpyA
FreeEnvironmentStringsW
SetErrorMode
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetExitCodeProcess
GetFileAttributesW
HeapDestroy
SetEndOfFile
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
RtlUnwind
GetModuleHandleW
GetCurrentThreadId
FindResourceA
GetEnvironmentStrings
CreateProcessA
GetLocalTime
IsValidCodePage
UnmapViewOfFile
VirtualFree
InterlockedIncrement
Sleep
VirtualAlloc
GetFullPathNameA
GetOEMCP
GetProcAddress
ResetEvent
oleaut32
VariantClear
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
ole32
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize
advapi32
RegCreateKeyExA
RegDeleteValueA
RegCreateKeyExW
RegCloseKey
RegQueryValueExA
user32
InvalidateRect
DrawTextA
SystemParametersInfoA
PostMessageA
GetSysColor
MessageBoxA
GetFocus
MessageBeep
EndDialog
GetDesktopWindow
TrackPopupMenu
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
CreateWindowExA
GetWindowLongA
CheckMenuItem
SetWindowTextA
SetWindowLongA
SetCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
SendMessageA
SetFocus
EndPaint
ReleaseDC
DispatchMessageA
FillRect
SetTimer
GetSubMenu
RegisterClassA
EnableMenuItem
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
SetWindowPos
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
UnregisterClassA
GetCursorPos
GetDC
IsWindow
LoadBitmapA
PostQuitMessage
DestroyMenu
SetForegroundWindow
GetClientRect
CallWindowProcA
SetCursor
PeekMessageA
gdi32
SetBkMode
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
SetTextColor
CreateSolidBrush
GetStockObject
DeleteDC
SetBkColor
Sections
.text Size: 420KB - Virtual size: 419KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ