Static task
static1
Behavioral task
behavioral1
Sample
22ceff774720e7a4f7a2b9804dfedf18_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
22ceff774720e7a4f7a2b9804dfedf18_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
22ceff774720e7a4f7a2b9804dfedf18_JaffaCakes118
-
Size
299KB
-
MD5
22ceff774720e7a4f7a2b9804dfedf18
-
SHA1
53e3ed5c4fa5ed63efd8ed4434138e94cd312d97
-
SHA256
970abafe3da602d1ef00e1106f1cea4cd05a9c0ffb2fb1620164f3da62a756ed
-
SHA512
23cd0f4a975bf834eea530287991f4dc5126d3f2123acfc60d7521f81a001adf915bcfe8c8d8ab551509d9edddf05f746c06349e66c76166bc8565d2e302f3e6
-
SSDEEP
3072:9Gbwf3ErYoo+w1+sm3e3W9K9xQ1OgdzxqtA+TGDL+OHXwqDGO6sbRWfBlP:ywcrD3w3W83MUNTGDyEfGO6oW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ceff774720e7a4f7a2b9804dfedf18_JaffaCakes118
Files
-
22ceff774720e7a4f7a2b9804dfedf18_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a743343eba19402e96d5d33d5cea901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareFileTime
CompareStringA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileW
DisableThreadLibraryCalls
DuplicateHandle
ExitProcess
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileW
FreeResource
GetCPInfo
GetCommandLineW
GetCurrentProcess
GetCurrentThread
GetDateFormatA
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesW
GetFileSize
GetFileType
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleW
GetPrivateProfileStringA
GetProcAddress
GetShortPathNameA
GetStartupInfoW
GetStringTypeExA
GetStringTypeW
GetSystemInfo
GetTempFileNameA
GetTempPathA
GetTempPathW
GetTickCount
GetUserDefaultLCID
GlobalAddAtomA
GlobalUnlock
HeapReAlloc
InterlockedDecrement
InterlockedExchange
IsBadCodePtr
IsValidCodePage
LCMapStringW
LoadLibraryExA
LoadLibraryExW
LocalFileTimeToFileTime
LocalFree
MapViewOfFile
MulDiv
RaiseException
RemoveDirectoryA
ResetEvent
ResumeThread
RtlUnwind
SetCurrentDirectoryA
SetErrorMode
SetFileTime
SetHandleCount
SetThreadLocale
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WriteConsoleA
WriteFile
lstrcmpiA
lstrcpyA
lstrlenW
user32
CallNextHookEx
CharLowerA
CharNextA
CheckMenuItem
CreateMenu
CreatePopupMenu
DeleteMenu
DestroyIcon
DrawIcon
DrawMenuBar
EnableMenuItem
EnumWindows
FindWindowA
FrameRect
GetActiveWindow
GetCursorPos
GetFocus
GetForegroundWindow
GetKeyState
GetLastActivePopup
GetMenuStringA
InsertMenuItemA
IsDialogMessageA
IsIconic
IsWindow
IsWindowEnabled
OemToCharA
PostQuitMessage
SetClassLongA
SetForegroundWindow
SetPropA
SetScrollInfo
WinHelpA
gdi32
AddFontResourceA
Chord
CloseMetaFile
CopyEnhMetaFileA
CopyMetaFileA
CreateBrushIndirect
CreateFontA
CreateFontIndirectW
CreateRectRgnIndirect
DPtoLP
ExcludeClipRect
ExtCreateRegion
ExtSelectClipRgn
FillPath
GetBkMode
GetBrushOrgEx
GetDCOrgEx
GetDIBits
GetDeviceCaps
GetEnhMetaFileDescriptionA
GetNearestPaletteIndex
MaskBlt
PlayEnhMetaFile
PtInRegion
RectInRegion
Rectangle
RemoveFontResourceA
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SetEnhMetaFileBits
SetGraphicsMode
SetTextAlign
SetViewportExtEx
SetWindowOrgEx
shell32
DragAcceptFiles
DragFinish
DragQueryFile
DragQueryFileA
DragQueryFileW
ExtractAssociatedIconW
ExtractIconA
ExtractIconExA
ExtractIconExW
FindExecutableW
SHAppBarMessage
SHBindToParent
SHBrowseForFolder
SHBrowseForFolderA
SHChangeNotify
SHCreateDirectoryExW
SHFileOperationA
SHGetDesktopFolder
SHGetFileInfo
SHGetFileInfoA
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDListA
SHGetSettings
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
ShellExecuteA
ShellExecuteEx
ShellExecuteExA
ShellExecuteW
Shell_NotifyIconW
comctl32
CreatePropertySheetPageA
ImageList_Add
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_Draw
ImageList_EndDrag
ImageList_GetIconSize
ImageList_LoadImageA
ImageList_Remove
ImageList_SetIconSize
ImageList_SetOverlayImage
ImageList_Write
InitCommonControls
InitializeFlatSB
PropertySheetW
advapi32
AllocateAndInitializeSid
CheckTokenMembership
ControlService
ConvertStringSecurityDescriptorToSecurityDescriptorW
DeregisterEventSource
GetLengthSid
InitializeSecurityDescriptor
OpenSCManagerA
OpenThreadToken
RegCreateKeyA
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExA
RegEnumKeyExW
RegEnumValueA
RegFlushKey
RegOpenKeyExA
RegQueryValueExW
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
ole32
CLSIDFromString
CoDisconnectObject
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoRegisterMessageFilter
CreateStreamOnHGlobal
IIDFromString
OleInitialize
OleIsCurrentClipboard
OleSetClipboard
OleSetMenuDescriptor
StringFromCLSID
StringFromIID
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ardata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE