Static task
static1
Behavioral task
behavioral1
Sample
2320fa60e3c5ee20bc09baa6f09b3d89_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2320fa60e3c5ee20bc09baa6f09b3d89_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2320fa60e3c5ee20bc09baa6f09b3d89_JaffaCakes118
-
Size
517KB
-
MD5
2320fa60e3c5ee20bc09baa6f09b3d89
-
SHA1
aae103cafb1f1949f0f55043ea0b5f13b486b33a
-
SHA256
e0c091c4f62b05b947cc21d3a69e8582b132d7d7a7b67f05146441c015cd01cb
-
SHA512
03c31cd14939a2ad0cb11d5b59f00510e1bef09914cb9eb0db3fc0c1988f1e3df6f02e3f87c799e59b882fcdbadaf56566be3cc4a0630d0ab65ded5d6cc44c0b
-
SSDEEP
12288:2aMq0byqK7kSETeVVbO6BraiNH5/p2Zk+XWARLsa+YpwM2S:g1K7BEqXbOoX5/z+XrLnpwM2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2320fa60e3c5ee20bc09baa6f09b3d89_JaffaCakes118
Files
-
2320fa60e3c5ee20bc09baa6f09b3d89_JaffaCakes118.exe windows:4 windows x86 arch:x86
0cac65cb5f2bfe5b1578e03744d61f86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteObject
GetStockObject
SelectObject
BitBlt
SetBkColor
CreateSolidBrush
kernel32
FindResourceW
UnmapViewOfFile
IsValidCodePage
SizeofResource
SetStdHandle
GetVersion
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
ExpandEnvironmentStringsA
FindNextFileA
DeleteFileW
ResetEvent
CompareStringA
FindFirstFileA
CompareStringW
GetSystemInfo
GetProcAddress
GetFullPathNameA
SetEvent
SetErrorMode
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
VirtualFree
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
MulDiv
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
VirtualProtect
InitializeCriticalSection
GetSystemTime
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
GetEnvironmentVariableA
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
lstrcmpiA
GetCPInfo
GetTempPathA
FreeEnvironmentStringsW
LoadLibraryExW
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
CreateFileMappingA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
Sleep
FindResourceA
VirtualAlloc
GetTickCount
user32
EndPaint
FillRect
SetTimer
GetWindowLongA
RegisterClassA
EnableMenuItem
SetForegroundWindow
LoadStringA
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
SetFocus
DestroyWindow
GetClientRect
ReleaseDC
GetCursorPos
GetDC
IsWindow
SetWindowPos
PostQuitMessage
MapWindowPoints
GetFocus
InvalidateRect
SendMessageA
SetCursor
GetMessageA
BeginPaint
GetSystemMetrics
DefWindowProcA
GetWindowRect
IsIconic
PostMessageA
ReleaseCapture
SetWindowLongA
CheckMenuItem
wsprintfA
CreateWindowExA
GetDlgItem
ScreenToClient
TrackPopupMenu
GetDesktopWindow
EndDialog
SetDlgItemTextA
MessageBoxA
GetSysColor
GetParent
IsWindowVisible
advapi32
RegSetValueExW
RegCloseKey
RegOpenKeyExA
oleaut32
SysAllocStringLen
VariantClear
SysAllocString
msvcrt
_strcmpi
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
exit
_cexit
_controlfp
Sections
.text Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ