Static task
static1
Behavioral task
behavioral1
Sample
29a4b18441d8e0222e400617cf4eba53_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29a4b18441d8e0222e400617cf4eba53_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
29a4b18441d8e0222e400617cf4eba53_JaffaCakes118
-
Size
320KB
-
MD5
29a4b18441d8e0222e400617cf4eba53
-
SHA1
66a3f9d3f281edfc499866141fb7083a293335a8
-
SHA256
a522fe9818bccdea8348fcedf8087f7912c0acfaf885725c999260a64a8b0445
-
SHA512
32a20245deadee4bad469c8874543666e1aa61a0884fa631d54010327caf01e3192169dcddbe7da9993600394260712917faf07006963ff3b261f9da2e6372aa
-
SSDEEP
6144:kZfWcZNB1gvklQSQYjLRdG1ysQimbrgm/WL3htV6XxaL5p51:u3ZNB6v6bxLRI5Q7PVuLZ6Bipf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29a4b18441d8e0222e400617cf4eba53_JaffaCakes118
Files
-
29a4b18441d8e0222e400617cf4eba53_JaffaCakes118.exe windows:4 windows x86 arch:x86
b07553af37c02741ce5815a47bfaf253
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenFile
_lread
ExitProcess
OpenSemaphoreW
GetSystemTime
GetBinaryTypeW
GetEnvironmentStringsW
SystemTimeToFileTime
GetDiskFreeSpaceW
IsProcessorFeaturePresent
lstrlenA
VirtualProtect
GetCommandLineA
GetVersionExA
user32
GetWindowTextA
GetMenuStringW
GetMenuInfo
LoadIconW
wvsprintfA
ScrollWindowEx
FrameRect
IsCharAlphaNumericW
CharUpperA
ScrollWindow
DrawFrameControl
GetCursorPos
SendInput
GetMenuDefaultItem
TranslateMessage
GetMenuItemInfoW
LoadCursorFromFileW
IsWindowVisible
DefMDIChildProcW
IsDialogMessageA
ShowWindowAsync
EnumChildWindows
SendDlgItemMessageA
CharToOemW
SetDlgItemInt
SetLastErrorEx
SetWindowTextW
GetUserObjectSecurity
IsClipboardFormatAvailable
TrackMouseEvent
RegisterClassExW
DrawAnimatedRects
CreateAcceleratorTableA
DialogBoxIndirectParamA
CharNextExA
GetClassNameW
GetWindowContextHelpId
SetTimer
SetMessageQueue
CreateDesktopA
GetActiveWindow
MapVirtualKeyW
EnumDisplaySettingsExW
GetSubMenu
DefWindowProcW
DrawTextA
SetUserObjectInformationW
GetScrollInfo
GetDlgItemInt
EnumWindowStationsA
InsertMenuItemW
HiliteMenuItem
GetDlgItem
ShowCaret
GetWindowLongW
BeginDeferWindowPos
CharUpperBuffA
DrawMenuBar
gdi32
PolyPolyline
CreateEllipticRgn
PtVisible
CreateBrushIndirect
GetStockObject
ScaleViewportExtEx
EnumObjects
CreateCompatibleDC
GetTextMetricsW
UnrealizeObject
EqualRgn
StartDocA
GetClipRgn
GetTextColor
BeginPath
comdlg32
PageSetupDlgW
GetFileTitleW
FindTextW
advapi32
DuplicateTokenEx
LookupPrivilegeValueA
ObjectCloseAuditAlarmA
RegFlushKey
BuildTrusteeWithNameW
StartServiceCtrlDispatcherW
OpenSCManagerA
CryptGetUserKey
RegisterServiceCtrlHandlerW
RegQueryInfoKeyW
CreateProcessAsUserA
RegUnLoadKeyA
CryptCreateHash
ReportEventA
RegLoadKeyA
RegSetValueA
CryptSetProvParam
InitiateSystemShutdownA
EnumDependentServicesW
GetSecurityDescriptorControl
RegUnLoadKeyW
SetEntriesInAclW
ImpersonateLoggedOnUser
shell32
SHGetDesktopFolder
SHGetSpecialFolderPathA
ole32
OleRegGetUserType
OleFlushClipboard
CoTreatAsClass
OleSaveToStream
StgCreateStorageEx
CoGetInterfaceAndReleaseStream
CoCreateInstanceEx
oleaut32
LoadTypeLibEx
SafeArrayRedim
VariantCopy
comctl32
ImageList_Duplicate
CreatePropertySheetPageA
shlwapi
PathAddBackslashW
PathIsRootA
PathSkipRootW
SHCopyKeyW
StrStrW
PathGetDriveNumberW
PathIsDirectoryA
UrlGetPartW
StrFormatKBSizeW
SHRegOpenUSKeyW
PathUnquoteSpacesA
PathAppendA
setupapi
SetupFindNextLine
SetupDiGetClassDevsW
SetupScanFileQueueA
SetupDiSetSelectedDriverW
SetupDiGetClassDevsExW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstallParamsW
Sections
.text Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE