Static task
static1
Behavioral task
behavioral1
Sample
242c509318b40aa1e8db50bdae42fd35_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
242c509318b40aa1e8db50bdae42fd35_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
242c509318b40aa1e8db50bdae42fd35_JaffaCakes118
-
Size
304KB
-
MD5
242c509318b40aa1e8db50bdae42fd35
-
SHA1
fd2f4439392a9d706d24086ed54ecaa63da03286
-
SHA256
5bd9eaa318c13dff25159d7eab6adbc9eb4a6f5b22199cd4497bb9673164dc02
-
SHA512
e701504677dbd1325a23573d39d251f4ce3c190fb16a0383af030ed676116ffbd8fa0c299a6e127b1549295729fe27a78964c6e265e287dbdb6b64e45f3d4dce
-
SSDEEP
6144:6Eem9+8hZvg67/eWzwqViA1db1Sr/ZXHycLXcDAcyHXWq47n5K:6Ee0hZI6reWRUArb1SRSBAtWfE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 242c509318b40aa1e8db50bdae42fd35_JaffaCakes118
Files
-
242c509318b40aa1e8db50bdae42fd35_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d9a996ba33882f752475212ad6ca4c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
WaitForSingleObject
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
CloseHandle
SetFileTime
CompareFileTime
GetFileAttributesA
GetTempFileNameA
GetTempPathA
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
Sleep
CopyFileA
GetFileSize
GetModuleFileNameA
GetExitCodeProcess
lstrcpynA
GetCommandLineA
GetTickCount
GetVersion
GetDiskFreeSpaceA
CreateThread
CreateProcessA
CreateFileA
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetWindowsDirectoryA
CreateDirectoryA
GetSystemDirectoryA
MultiByteToWideChar
GlobalFree
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcess
ExitProcess
WritePrivateProfileStringA
GlobalAlloc
GetPrivateProfileStringA
WriteFile
ReadFile
SetFilePointer
MulDiv
lstrlenA
lstrcatA
lstrcpyA
SetFileAttributesA
DeleteFileA
FindNextFileA
RemoveDirectoryA
FindFirstFileA
FindClose
GetModuleHandleA
user32
CreateDialogParamA
CharNextA
SetWindowPos
ScreenToClient
GetWindowRect
GetDlgItem
GetDlgItemTextA
GetParent
EnableWindow
CharPrevA
GetAsyncKeyState
IsDlgButtonChecked
SendDlgItemMessageA
LoadBitmapA
IsWindowVisible
SetFocus
EndDialog
CheckDlgButton
IsWindowEnabled
SetClassLongA
DialogBoxParamA
DestroyWindow
SetTimer
SetWindowTextA
SetDlgItemTextA
PostQuitMessage
ShowWindow
SetForegroundWindow
MessageBoxA
FindWindowExA
IsWindow
PeekMessageA
DispatchMessageA
ExitWindowsEx
SendMessageA
wsprintfA
LoadIconA
LoadCursorA
RegisterClassA
SystemParametersInfoA
GetDesktopWindow
CreateWindowExA
BeginPaint
GetClientRect
SetRect
FillRect
GetWindowTextA
DrawTextA
EndPaint
DefWindowProcA
gdi32
CreatePen
GetStockObject
MoveToEx
GetNearestColor
CreateBrushIndirect
LineTo
GetTextColor
CreateCompatibleDC
BitBlt
DeleteObject
CreateSolidBrush
CreateFontA
SetBkMode
SetTextColor
SetBkColor
SelectObject
advapi32
RegCloseKey
RegDeleteValueA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHFileOperationA
ShellExecuteA
ole32
OleInitialize
CoCreateInstance
OleUninitialize
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ