Static task
static1
Behavioral task
behavioral1
Sample
257c73452e380219295187dd4a56429a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
257c73452e380219295187dd4a56429a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
257c73452e380219295187dd4a56429a_JaffaCakes118
-
Size
286KB
-
MD5
257c73452e380219295187dd4a56429a
-
SHA1
800b2be2f58af7348814ecc2ec02fe6b22130fd9
-
SHA256
34b1004355d90ec5735a57a0f54fd07eebe034f1b636be3035817f653635d6e4
-
SHA512
9f3d440d8cce5cb51fb1e66bb471dda25dda9e906e12567fff366b15297f1249c1317ec60213c0f7b6b2ff4e0e1940bcbae6a8bfaab2de5deb48ff62950ce574
-
SSDEEP
6144:oSd5BnjhKcd4pBmZ8KlWY8jG5Fzh+kFgOBtDeOn1YlO:oqvjhKDpBWq9Oh+kCOPyO1F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 257c73452e380219295187dd4a56429a_JaffaCakes118
Files
-
257c73452e380219295187dd4a56429a_JaffaCakes118.exe windows:4 windows x86 arch:x86
dd55e939ff095cb98d05ca6c5217b8d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ReadConsoleOutputAttribute
InterlockedExchangeAdd
UnlockFile
SearchPathA
ReadConsoleA
SetConsoleTitleA
lstrcpynA
ReleaseMutex
GetCommandLineA
lstrcpyA
GetFullPathNameA
SetFileApisToANSI
GetThreadTimes
GetVersionExA
lstrlenA
BackupRead
LoadLibraryA
GetPrivateProfileStructW
SwitchToFiber
GetPrivateProfileSectionNamesW
SetConsoleCursorInfo
EnumSystemLocalesW
lstrcpynW
GetVersion
DebugBreak
RemoveDirectoryW
FormatMessageA
GetTimeFormatW
FreeConsole
IsBadStringPtrA
GetStartupInfoA
SetEndOfFile
CompareFileTime
CreateFileMappingW
OpenSemaphoreW
ConvertThreadToFiber
SetConsoleWindowInfo
ExpandEnvironmentStringsA
Sleep
CreateMutexW
CreateThread
GetFileAttributesW
OpenWaitableTimerW
GetDiskFreeSpaceExA
GetConsoleOutputCP
CreateConsoleScreenBuffer
GetPrivateProfileStringA
MoveFileA
ContinueDebugEvent
SetThreadAffinityMask
GetNamedPipeHandleStateW
GetDiskFreeSpaceExW
BackupSeek
GetStdHandle
GetCalendarInfoA
RaiseException
Module32First
DeleteFiber
HeapLock
WritePrivateProfileSectionA
GetSystemDefaultLangID
WaitCommEvent
user32
RemoveMenu
SetClassWord
RemovePropW
EnumPropsA
SwapMouseButton
wvsprintfA
WinHelpW
SetWindowsHookW
MapDialogRect
CreateIconFromResourceEx
GetScrollPos
LoadImageA
CreateWindowExW
GetMenuContextHelpId
GetUserObjectInformationA
LoadStringW
SetSysColors
GetTabbedTextExtentW
IsClipboardFormatAvailable
GetClipboardViewer
UnionRect
CharLowerA
DialogBoxParamW
CallMsgFilterA
AnyPopup
CascadeWindows
ToUnicodeEx
GetKeyboardLayoutNameW
IsWindow
GetMenuItemCount
SendMessageTimeoutA
LoadMenuW
MapWindowPoints
LoadCursorA
CreateWindowStationA
MessageBoxExA
CreateAcceleratorTableW
DragDetect
CreateIcon
CheckRadioButton
VkKeyScanExW
PostQuitMessage
CountClipboardFormats
SetMenuItemInfoW
DrawIconEx
gdi32
PolyPolyline
GetLogColorSpaceA
CopyMetaFileA
CreateEnhMetaFileW
GetNearestColor
SetICMProfileA
GetTextColor
EndPage
SetPixel
OffsetViewportOrgEx
GetOutlineTextMetricsW
CheckColorsInGamut
EnumMetaFile
GetGraphicsMode
GdiFlush
TranslateCharsetInfo
RemoveFontResourceA
PtVisible
CreateMetaFileA
PolyTextOutW
GetROP2
SelectClipRgn
PtInRegion
CreateRectRgn
GetGlyphOutlineW
GetMetaFileW
AddFontResourceA
PolyPolygon
SetColorAdjustment
AddFontResourceW
GetRgnBox
GetRegionData
RestoreDC
BeginPath
GetCharWidthFloatA
GetDIBColorTable
PolyBezier
AbortDoc
GetCharWidth32W
PolylineTo
DrawEscape
GetTextExtentPointA
comdlg32
ChooseColorA
GetSaveFileNameA
advapi32
CryptEnumProviderTypesA
GetTokenInformation
IsValidAcl
RegQueryInfoKeyW
ObjectDeleteAuditAlarmA
ObjectCloseAuditAlarmW
LookupAccountNameA
RegEnumKeyA
GetSecurityDescriptorGroup
RegUnLoadKeyA
SetServiceObjectSecurity
BuildTrusteeWithNameW
ReportEventA
ClearEventLogA
GetAuditedPermissionsFromAclA
RegSetValueA
GetServiceDisplayNameA
CryptVerifySignatureW
GetMultipleTrusteeA
PrivilegeCheck
NotifyBootConfigStatus
ObjectPrivilegeAuditAlarmA
BackupEventLogA
LookupPrivilegeNameW
AreAllAccessesGranted
GetSecurityDescriptorSacl
shell32
SHAddToRecentDocs
SHAppBarMessage
DragQueryFileA
DoEnvironmentSubstW
msvcrt
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
Sections
.text Size: 278KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
shfwbapd Size: 65B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vlhdkbr1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ