Static task
static1
Behavioral task
behavioral1
Sample
2435688342f8823757762f5793bf2f29_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2435688342f8823757762f5793bf2f29_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2435688342f8823757762f5793bf2f29_JaffaCakes118
-
Size
348KB
-
MD5
2435688342f8823757762f5793bf2f29
-
SHA1
05141b29bcd0b8f150fe4747482242d535288ec9
-
SHA256
b5fd57553f6bb0e5f9f73554932e3c59c4b856e79921f8eb15c43e3219e3fec6
-
SHA512
2b4759782bc98621aad8e880cf460641259d53425673a366f54550e84dc9f3555f87747694559f4ac645ec937f73657ae9f1dd77db59bf2c2c3d51b6b769dcc7
-
SSDEEP
6144:MIPtkkByDz4GbDwHvDDxnixsJMfdRbwuRnH1K3ZNyTTRMNJkPX2LnXV0eOo/xObP:MeeXDzRyvDhlAdFfnH1GrMPXMnF0eOoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2435688342f8823757762f5793bf2f29_JaffaCakes118
Files
-
2435688342f8823757762f5793bf2f29_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa4aa7526e1c4f8eafcf38219fb60386
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectObject
SetTextColor
GetStockObject
DeleteDC
GetDeviceCaps
CreateSolidBrush
kernel32
VirtualAlloc
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCurrentProcessId
GetEnvironmentStrings
GlobalAlloc
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
lstrlenA
GetSystemInfo
HeapCreate
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GlobalLock
WaitForMultipleObjects
FindNextFileA
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
GetEnvironmentVariableA
DeleteFileA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
SetHandleCount
EnterCriticalSection
HeapFree
GetCurrentThreadId
SetEndOfFile
VirtualQuery
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
CreateFileA
CreateThread
SetFilePointer
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
ExitProcess
GetModuleFileNameW
TlsGetValue
SetLastError
FormatMessageA
InterlockedDecrement
LoadResource
InitializeCriticalSection
GetExitCodeProcess
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
SetStdHandle
WriteFile
InterlockedExchange
GetSystemTimeAsFileTime
GetStringTypeA
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
HeapDestroy
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
user32
PtInRect
CreateWindowExA
EnableMenuItem
GetWindow
IsWindowEnabled
PeekMessageA
EnableWindow
ShowWindow
DefWindowProcA
SetFocus
DestroyWindow
UnregisterClassA
ReleaseDC
GetDC
EndPaint
DispatchMessageA
IsWindow
SetWindowPos
PostQuitMessage
BeginPaint
ReleaseCapture
SetWindowLongA
EndDialog
SetWindowTextA
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
SetForegroundWindow
MessageBoxA
DialogBoxParamA
GetSysColor
SendMessageA
GetClientRect
UpdateWindow
SetCursor
msvcrt
_strcmpi
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 320KB - Virtual size: 318KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ