Static task
static1
Behavioral task
behavioral1
Sample
27575c8c82adbf0db96b4208eec3dbf0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27575c8c82adbf0db96b4208eec3dbf0_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
27575c8c82adbf0db96b4208eec3dbf0_JaffaCakes118
-
Size
97KB
-
MD5
27575c8c82adbf0db96b4208eec3dbf0
-
SHA1
e4b9a5e92d0c34a30dee65f0a2e380339e58d22d
-
SHA256
c4039c4c5d45ae5958698ef703804901211c1649d4105d1258aaaa9bd0b4a721
-
SHA512
4153d8661c2ce3c2957ecbea2a5d24bd752982c9650098c41625a5f37664649023e948b0948d64c77fd6e6fdb20258278f274d6f83e5d28c6de909844941804d
-
SSDEEP
1536:fMjwCtQgBkyapiegaTizsuTMIVWbmIjitHXutR/+lDc7gmZi:U0CtQgBiprgaTAHvIj+HXsQlDc7gOi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27575c8c82adbf0db96b4208eec3dbf0_JaffaCakes118
Files
-
27575c8c82adbf0db96b4208eec3dbf0_JaffaCakes118.exe windows:4 windows x86 arch:x86
92b0f15f68c044f828b9b7f628c3e019
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
LocalFree
ReadFile
GetWindowsDirectoryA
GetProfileStringA
VirtualAlloc
FlushFileBuffers
SetFilePointer
HeapSize
HeapAlloc
HeapReAlloc
LCMapStringW
LCMapStringA
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
RtlUnwind
CloseHandle
HeapFree
WriteFile
GetLastError
GetVersion
GetCommandLineA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetProcAddress
GetStringTypeW
GetStringTypeA
CreateFileA
SetStdHandle
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
_lclose
OpenFile
GetStartupInfoA
_llseek
WriteProfileStringA
GlobalReAlloc
LoadLibraryA
LocalAlloc
_lread
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
user32
ValidateRect
DrawMenuBar
EnableMenuItem
ModifyMenuA
LoadStringA
CreateWindowExA
GetMenu
MessageBoxA
GetClientRect
TranslateAcceleratorA
DispatchMessageA
TranslateMessage
LoadAcceleratorsA
RegisterClassA
LoadCursorA
LoadIconA
InvalidateRect
ShowWindow
CheckMenuItem
SetDlgItemTextA
EndDialog
DialogBoxParamA
BeginPaint
EndPaint
SendMessageA
PeekMessageA
KillTimer
PostQuitMessage
SetTimer
DestroyWindow
DefWindowProcA
MessageBeep
LoadMenuA
GetDC
GetWindowRect
UpdateWindow
OffsetRect
InflateRect
IntersectRect
SetRect
ReleaseCapture
wvsprintfA
ReleaseDC
DrawTextA
CallNextHookEx
PostMessageA
InsertMenuA
GetSubMenu
SetWindowsHookA
WinHelpA
UnionRect
SetWindowTextA
GetDlgItem
FillRect
UnregisterClassA
SetCapture
SetCursor
PtInRect
GetMessageA
gdi32
GetDeviceCaps
UpdateColors
RealizePalette
CreateDIBitmap
CreatePalette
TextOutA
GetTextMetricsA
SetTextColor
DeleteDC
SelectPalette
SetBkMode
SetBkColor
GetStockObject
PtInRegion
CreatePolygonRgn
GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
winmm
mciSendCommandA
waveOutSetVolume
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutWrite
waveOutPrepareHeader
mciGetErrorStringA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ