Static task
static1
Behavioral task
behavioral1
Sample
2349098cb5badc102955cc932670200e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2349098cb5badc102955cc932670200e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2349098cb5badc102955cc932670200e_JaffaCakes118
-
Size
328KB
-
MD5
2349098cb5badc102955cc932670200e
-
SHA1
7df71fe9e6936f4251967b8433c4f83995d194f9
-
SHA256
af49c7719cf66a96f93583de39a022be51e35877384d76eab07cdc1da1894423
-
SHA512
ce3f9978ea62e32674ec3b989cfd3f5128fd3a52aaaddaaa2ea86b04fd1f348d6fd58092c22f9b0ff474c9e224babb450d80941da9c396527374d55c4f8cacba
-
SSDEEP
6144:ONta6tQRfeoW7JBxk7QlCkukItPgbMl3/Iho2/pUbcdGnjhlkwqqKn:ubQE756ksPgsvI5/pUbcdIjhlkwvKn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2349098cb5badc102955cc932670200e_JaffaCakes118
Files
-
2349098cb5badc102955cc932670200e_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc196ee5594599da8b39f7a4733c776c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegQueryValueExW
DeregisterEventSource
ReportEventA
RegisterEventSourceW
RegEnumValueA
GetUserNameA
comctl32
ord17
gdi32
DeleteDC
RestoreDC
DeleteObject
GetTextMetricsA
GetTextFaceA
SelectObject
CreateFontA
GetDeviceCaps
SetMapMode
SaveDC
Polyline
CreatePen
ExtTextOutW
GetTextExtentPoint32W
SetTextAlign
SetBkMode
SetTextColor
CreateFontIndirectA
GetObjectA
kernel32
MultiByteToWideChar
GetCommandLineA
ExitProcess
GetCommandLineW
MapViewOfFile
ReleaseMutex
WaitForSingleObject
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
DeleteFileW
GetModuleHandleA
GetStartupInfoA
GetStartupInfoW
CloseHandle
CreateThread
Sleep
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
MulDiv
FreeLibrary
GetProcAddress
WideCharToMultiByte
GetModuleFileNameA
LoadLibraryA
GetSystemDefaultLangID
GetUserDefaultLangID
GetACP
GetSystemDefaultLCID
GetVersionExA
InitializeCriticalSection
GetProcessHeap
DeleteCriticalSection
lstrcpyA
GetLastError
GetProfileStringA
SetEvent
CreateSemaphoreA
CreateFileMappingA
GetFileSize
CreateFileA
UnmapViewOfFile
DeleteFileA
RemoveDirectoryA
RemoveDirectoryW
GetTickCount
SetEnvironmentVariableA
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
GetFileAttributesA
CreateDirectoryA
FindNextFileA
FindClose
FindFirstFileA
GetWindowsDirectoryA
WriteFile
SetFilePointer
CreateFileW
GetTempPathW
GetFileAttributesW
CreateDirectoryW
LockResource
LoadResource
FindResourceExA
GetSystemDirectoryA
SetEndOfFile
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
IsDBCSLeadByte
CreateProcessA
CreateProcessW
SuspendThread
GetSystemTime
GetComputerNameA
CreateMutexA
TlsAlloc
TlsFree
TlsSetValue
VirtualFree
TlsGetValue
GetTempPathA
ResumeThread
GetCurrentThreadId
TerminateThread
GetCurrentProcessId
IsValidCodePage
HeapAlloc
VirtualAlloc
DuplicateHandle
lstrcmpW
GetStringTypeW
DebugBreak
GetThreadSelectorEntry
GetLocaleInfoA
LCMapStringW
GetThreadContext
HeapFree
SetLastError
GetSystemTimeAsFileTime
OutputDebugStringA
LCMapStringA
GetStringTypeA
RtlUnwind
oleaut32
SysFreeString
VariantTimeToDosDateTime
SysAllocString
SystemTimeToVariantTime
SysStringLen
shell32
ExtractIconExA
ShellExecuteExA
shlwapi
AssocQueryStringW
UrlGetPartA
wnsprintfA
urlmon
CreateURLMoniker
user32
GetScrollInfo
IsDlgButtonChecked
LoadIconA
DrawFocusRect
SetWindowTextW
GetWindow
LoadCursorA
DestroyIcon
GetWindowPlacement
IsIconic
LoadStringW
GetWindowThreadProcessId
EnumWindows
CharPrevA
CallWindowProcA
CallWindowProcW
IsWindowUnicode
EnableWindow
DrawIconEx
DestroyWindow
SetWindowLongA
GetSysColor
SendDlgItemMessageA
GetClientRect
SetScrollInfo
SystemParametersInfoA
CheckDlgButton
SetDlgItemTextA
SetFocus
EndDialog
GetDlgItem
ShowWindow
SetCursor
InvalidateRect
DialogBoxParamW
DialogBoxParamA
CreateDialogParamW
CreateDialogParamA
SetWindowTextA
GetDC
MapWindowPoints
GetSysColorBrush
FillRect
ReleaseDC
GetSystemMetrics
SetForegroundWindow
GetWindowLongA
GetWindowRect
SetWindowPos
RegisterClassExA
CreateWindowExA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
KillTimer
SetTimer
SendMessageA
PostMessageA
DefWindowProcA
version
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoA
wininet
InternetReadFileExA
InternetWriteFile
HttpSendRequestExA
InternetSetOptionA
HttpEndRequestA
InternetSetStatusCallback
InternetAutodial
InternetGetConnectedState
InternetCloseHandle
InternetQueryOptionA
HttpQueryInfoA
HttpOpenRequestA
InternetConnectA
InternetOpenA
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ