Static task
static1
Behavioral task
behavioral1
Sample
248a9bcf28df6c5a7901be5ec6094106_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
248a9bcf28df6c5a7901be5ec6094106_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
248a9bcf28df6c5a7901be5ec6094106_JaffaCakes118
-
Size
120KB
-
MD5
248a9bcf28df6c5a7901be5ec6094106
-
SHA1
c918d4f798cd22fc4c45e8ad85c374ea35999878
-
SHA256
cf933478f717f9d2e91fbddce4802a0d06cd68afe43c2908d170e4eba500c8bc
-
SHA512
36d323a32519e46d5c4a955383836081bc77db5cc1562bc8838e182141f377924fed1c76fc1721becc6b58bc8dce01640341f1c8ec220ee2518771f8c4ecb20d
-
SSDEEP
3072:Y2VD3dVa27KdfThnbJi0CuAR5wlFUUlGOx/c2IfkU2:Y43Ag0C3wlZdx/I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 248a9bcf28df6c5a7901be5ec6094106_JaffaCakes118
Files
-
248a9bcf28df6c5a7901be5ec6094106_JaffaCakes118.exe windows:4 windows x86 arch:x86
7dea59f1c4af5cc5cc639a27dc05e121
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetPaletteEntries
CreateCompatibleBitmap
SetTextColor
CreateBitmap
LineTo
BitBlt
SetBkColor
GetCurrentPositionEx
CopyEnhMetaFileA
CreateCompatibleDC
CreateFontIndirectA
LineTo
CreateCompatibleBitmap
GetRgnBox
GetDCOrgEx
BitBlt
CopyEnhMetaFileA
RestoreDC
CreateBrushIndirect
SelectObject
GetBitmapBits
CreatePalette
GetDIBColorTable
LineTo
SelectObject
SetBkColor
CreateBrushIndirect
CreatePenIndirect
RestoreDC
GetCurrentPositionEx
GetObjectA
GetPaletteEntries
GetDIBits
GetClipBox
GetPaletteEntries
comdlg32
FindTextA
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
GetFileTitleA
ChooseColorA
FindTextA
GetOpenFileNameA
GetSaveFileNameA
FindTextA
ChooseColorA
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
ChooseColorA
FindTextA
advapi32
RegEnumValueA
RegOpenKeyExA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyExA
RegEnumValueA
RegLoadKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumKeyExA
RegOpenKeyA
GetUserNameA
RegQueryValueA
RegCreateKeyExA
GetLengthSid
RegEnumValueA
kernel32
GetProcAddress
GetCommandLineA
ExitProcess
ExitThread
LoadLibraryExA
lstrlenA
IsBadReadPtr
GetLastError
GetCommandLineW
GetModuleHandleA
GetOEMCP
LoadLibraryA
VirtualAllocEx
IsBadHugeReadPtr
GetCurrentThread
HeapDestroy
lstrlenA
GetLastError
shlwapi
PathIsDirectoryA
PathIsContentTypeA
PathFileExistsA
SHQueryInfoKeyA
PathGetCharTypeA
SHGetValueA
SHQueryValueExA
SHQueryValueExA
SHStrDupA
SHEnumValueA
PathGetCharTypeA
SHGetValueA
PathIsContentTypeA
SHSetValueA
SHDeleteKeyA
PathFileExistsA
SHSetValueA
SHEnumValueA
PathIsDirectoryA
SHQueryInfoKeyA
SHQueryValueExA
shell32
SHGetDiskFreeSpaceA
SHGetDesktopFolder
Shell_NotifyIconA
SHFileOperationA
SHGetSpecialFolderLocation
SHGetFileInfoA
DragQueryFileA
SHGetDesktopFolder
Shell_NotifyIconA
SHFileOperationA
SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetFileInfoA
oleaut32
SafeArrayGetElement
GetErrorInfo
SysAllocStringLen
SysFreeString
SysReAllocStringLen
SafeArrayPtrOfIndex
GetErrorInfo
SysAllocStringLen
SysFreeString
VariantChangeType
SafeArrayUnaccessData
SysReAllocStringLen
OleLoadPicture
SysFreeString
OleLoadPicture
SysStringLen
SafeArrayGetElement
SafeArrayGetUBound
ole32
ReleaseStgMedium
CreateStreamOnHGlobal
MkParseDisplayName
CreateBindCtx
CoTaskMemFree
StringFromIID
CreateBindCtx
CoUninitialize
CLSIDFromProgID
CoUnmarshalInterface
PropVariantClear
StgOpenStorage
CoCreateFreeThreadedMarshaler
CLSIDFromProgID
CreateBindCtx
CoRegisterClassObject
CoCreateFreeThreadedMarshaler
MkParseDisplayName
CoCreateGuid
CoUnmarshalInterface
CoGetMalloc
CoFreeUnusedLibraries
CLSIDFromString
StgCreateDocfileOnILockBytes
CoRegisterClassObject
ReleaseStgMedium
OleCreateStaticFromData
CLSIDFromProgID
CoGetMalloc
WriteClassStm
user32
GetLastActivePopup
OpenClipboard
GetFocus
IsZoomed
GetParent
CharUpperBuffA
InvalidateRect
SetForegroundWindow
RemoveMenu
EnumThreadWindows
GetDC
CallNextHookEx
GetWindowThreadProcessId
GetKeyboardLayout
MessageBeep
DrawFrameControl
SetParent
LoadBitmapA
TranslateMessage
ScrollWindow
DefMDIChildProcA
CreateMenu
GetIconInfo
SetScrollPos
GetCursorPos
InvalidateRect
GetIconInfo
SystemParametersInfoA
DrawEdge
SetWindowPos
CreateMenu
SetPropA
GetMenu
DrawAnimatedRects
WindowFromPoint
KillTimer
EqualRect
GetActiveWindow
EndPaint
FillRect
IsIconic
DefMDIChildProcA
SetMenuItemInfoA
GetMenuState
GetClipboardData
SetClassLongA
CallNextHookEx
DefFrameProcA
SetWindowTextA
GetIconInfo
GetWindowTextA
SetCapture
PeekMessageW
DrawTextA
LoadBitmapA
CheckMenuItem
EnumThreadWindows
SetForegroundWindow
DestroyWindow
CharLowerA
DeleteMenu
SetScrollPos
GetDCEx
EmptyClipboard
GetDC
DestroyMenu
ScreenToClient
EnumWindows
PeekMessageA
RegisterClassA
MoveWindow
LoadStringA
IsWindow
GetWindowTextA
PeekMessageA
GetMessagePos
GetMenuState
MessageBeep
SetActiveWindow
SetPropA
WindowFromPoint
LoadBitmapA
UnregisterClassA
DestroyWindow
OemToCharA
CheckMenuItem
GetDC
CharNextW
GetLastActivePopup
GetWindowPlacement
SetCapture
FindWindowA
msvcrt
exit
atan
_acmdln
fabs
tan
memcmp
atan
malloc
tolower
time
strlen
memset
asin
time
exit
strcmp
comctl32
ImageList_Create
ImageList_DrawEx
ImageList_Remove
ImageList_Read
ImageList_DrawEx
ImageList_Create
ImageList_Add
ImageList_GetBkColor
ImageList_DragShowNolock
ImageList_Write
ImageList_Draw
ImageList_Add
ImageList_GetBkColor
ImageList_Draw
ImageList_Remove
ImageList_Destroy
ImageList_Read
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 621B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ