Static task
static1
Behavioral task
behavioral1
Sample
272b50b35738b790a3a2522a5df25fb9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
272b50b35738b790a3a2522a5df25fb9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
272b50b35738b790a3a2522a5df25fb9_JaffaCakes118
-
Size
943KB
-
MD5
272b50b35738b790a3a2522a5df25fb9
-
SHA1
96f060ca540b62c07f9a1cc82771f7b611e4358e
-
SHA256
d7fe6ff3d187e5ecc25659d036987142022919302910543572e44707c1598c65
-
SHA512
86a0863fecf19c0d96d2f857de603ca3e5d6cdf6d843f0c0fbce5d9d643819f090e25ba5abde3ac9835a56e42ad297e1614cc437babb63e1c51f7bef104b1182
-
SSDEEP
24576:NKThCKiBsi31onpyVco6pZ2ItfTwqBFJJU6SMz6Sv+NkT:NS6JVco6p0evjtH65NkT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 272b50b35738b790a3a2522a5df25fb9_JaffaCakes118
Files
-
272b50b35738b790a3a2522a5df25fb9_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c814fb3e00a007dddc49dc3418d01a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dinput
DirectInputCreateA
dsound
DirectSoundCreate
DirectSoundEnumerateA
ddraw
DirectDrawCreate
DirectDrawEnumerateA
winmm
timeGetTime
mciSendCommandA
joyGetPosEx
joyGetDevCapsA
user32
MessageBoxA
wsprintfA
ShowCursor
LoadImageA
SetWindowPos
GetWindowRect
WaitMessage
PostQuitMessage
DefWindowProcA
CreateWindowExA
UpdateWindow
LoadIconA
RegisterClassA
PeekMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
GetDlgItem
SendMessageA
ShowWindow
EnableWindow
EndDialog
DialogBoxParamA
SystemParametersInfoA
gdi32
DeleteDC
GetStockObject
CreateCompatibleDC
SelectObject
GetObjectA
BitBlt
winplay
Player_ShutDownMovie
Player_PassInDirectDrawObject
Player_InitMovie
Movie_GetFormat
Movie_GetYSize
Movie_GetXSize
Player_InitVideo
Player_InitPlaybackMode
Player_BlankScreen
Player_InitSoundSystem
Player_ShutDownSoundSystem
Player_ReturnPlaybackMode
Movie_GetSoundRate
Movie_GetSoundChannels
Player_InitSound
Player_SetVolume
Movie_SetSyncAdjust
Player_InitMoviePlayback
Player_StartTimer
Movie_GetCurrentFrame
Movie_GetTotalFrames
Player_PlayFrame
Player_ShutDownVideo
Player_ShutDownSound
Movie_GetSoundPrecision
Player_GetDSErrorCode
Player_StopTimer
kernel32
SetFilePointer
CreateThread
FreeEnvironmentStringsW
MultiByteToWideChar
SetUnhandledExceptionFilter
HeapSize
GetLastError
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
HeapReAlloc
HeapAlloc
HeapFree
GetLocalTime
GetTimeZoneInformation
RaiseException
LocalFree
SetErrorMode
LoadLibraryA
GetProcAddress
LocalAlloc
FreeLibrary
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
FlushFileBuffers
IsBadCodePtr
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ReadFile
GlobalAlloc
GlobalFree
CreateFileA
GetDriveTypeA
ExitThread
WaitForMultipleObjects
WriteFile
CreateEventA
lstrcpyA
GetLogicalDrives
QueryPerformanceCounter
QueryPerformanceFrequency
Sections
.text Size: 773KB - Virtual size: 772KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ