Static task
static1
Behavioral task
behavioral1
Sample
2b457cd5bc3b945ca05b197afa4d4f9f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2b457cd5bc3b945ca05b197afa4d4f9f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2b457cd5bc3b945ca05b197afa4d4f9f_JaffaCakes118
-
Size
54KB
-
MD5
2b457cd5bc3b945ca05b197afa4d4f9f
-
SHA1
baf4f30b1624ccedfabd0ae367b5c6088a3fa4ce
-
SHA256
5fb3d91adc541f56d1fbffb58e237321ff1a5a35916b64cfaf62ba9f4161d0af
-
SHA512
e589073613f2f1c03854e4839193beb1bd617b273c66157688bce50e476cf08ec6034f02fcc11f5be2a12c1a7d6534b356deca08a30efea37425e63aad877478
-
SSDEEP
1536:K5Zo6kQX3wRLSlwr1SojEPouke1OBlHX:Kg8X3wRTLEwxCOfHX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b457cd5bc3b945ca05b197afa4d4f9f_JaffaCakes118
Files
-
2b457cd5bc3b945ca05b197afa4d4f9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b2d83561a89ea1dc51c010276efa587
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
activeds
FreeADsMem
user32
FillRect
CloseClipboard
GetDlgCtrlID
EnableMenuItem
GetUpdateRect
SetKeyboardState
IsRectEmpty
ShowCaret
GetForegroundWindow
HideCaret
AdjustWindowRectEx
WaitMessage
IsChild
GetSystemMetrics
PostMessageW
MessageBeep
GetSubMenu
SetScrollInfo
GetCapture
CharNextA
GetClassWord
ChildWindowFromPoint
BeginPaint
GetShellWindow
CopyRect
DrawEdge
CreatePopupMenu
InSendMessage
SetActiveWindow
DestroyAcceleratorTable
RegisterWindowMessageA
GetWindowDC
KillTimer
GetMenuItemCount
WindowFromPoint
PtInRect
RegisterWindowMessageW
CheckMenuItem
RemoveMenu
GetAsyncKeyState
LoadStringA
GetWindowThreadProcessId
GetSysColorBrush
GetSysColor
SendMessageA
DrawIconEx
GetDC
SetCursor
GetScrollInfo
ReleaseDC
TranslateMessage
MsgWaitForMultipleObjectsEx
InsertMenuA
SendMessageTimeoutA
SetFocus
SetWindowRgn
MoveWindow
InsertMenuW
GetDoubleClickTime
SetTimer
GetDlgItem
IsWindowEnabled
GetClientRect
ReleaseCapture
UpdateWindow
CreateIconIndirect
IsWindow
EnumWindows
SetRectEmpty
EnableWindow
UnhookWindowsHookEx
EndDialog
MsgWaitForMultipleObjects
ScreenToClient
WaitForInputIdle
GetDesktopWindow
IntersectRect
SetWindowLongA
IsIconic
LoadMenuA
GetKeyboardState
EnumChildWindows
GetActiveWindow
GetKeyState
InvalidateRect
SetRect
IsWindowVisible
SetMenuDefaultItem
InflateRect
MapWindowPoints
GetClipboardData
GetIconInfo
GetParent
SetWindowPos
OpenClipboard
DestroyWindow
CharNextW
ClientToScreen
ShowWindow
GetCursorPos
OffsetRect
CallNextHookEx
GetCursor
GetWindow
CopyIcon
SetParent
IsMenu
SetForegroundWindow
ShowScrollBar
IsWindowUnicode
SetScrollPos
EndPaint
LockWindowUpdate
SetCapture
GetFocus
GetProcessWindowStation
SetWindowPlacement
GetMenuItemID
GetWindowLongA
RedrawWindow
LoadMenuW
GetWindowRect
GetWindowPlacement
DestroyIcon
LoadCursorA
GetMenuState
GetCaretPos
SystemParametersInfoA
EqualRect
SetMenu
GetSystemMenu
GetMessagePos
CreateMenu
cmdial32
CmCustomHangUp
AutoDialFunc
advapi32
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
gdi32
EqualRgn
GetTextExtentPointW
CreateDIBSection
CreateRectRgn
MoveToEx
GetPixel
SetTextColor
CreateBitmap
SetTextAlign
SetStretchBltMode
TextOutA
CreatePen
LineTo
CreateRectRgnIndirect
GetClipBox
SetBkMode
SelectObject
GetTextExtentPoint32A
CombineRgn
SetViewportExtEx
RealizePalette
SelectPalette
SetRectRgn
CreateCompatibleDC
CreatePolygonRgn
SaveDC
CreateCompatibleBitmap
GetPaletteEntries
BitBlt
SetViewportOrgEx
DeleteDC
PatBlt
OffsetWindowOrgEx
DeleteObject
GetDCOrgEx
StretchBlt
SetMapMode
GetTextAlign
CreateFontIndirectA
SetBkColor
CreateSolidBrush
SetWindowExtEx
SetWindowOrgEx
GetDeviceCaps
RestoreDC
GetStockObject
kernel32
ReleaseSemaphore
LeaveCriticalSection
OpenMutexA
GetSystemTime
DuplicateHandle
GlobalUnlock
TlsFree
WideCharToMultiByte
LoadLibraryExA
FormatMessageA
DeleteCriticalSection
FreeLibrary
InterlockedCompareExchange
lstrcpynW
lstrcmpA
InitializeCriticalSection
InterlockedDecrement
GlobalAlloc
GetCurrentProcess
GetProcAddress
LocalFree
LoadLibraryW
GlobalLock
GetTickCount
Sleep
ResetEvent
SetUnhandledExceptionFilter
InterlockedExchange
GlobalFree
OpenProcess
GetLocaleInfoW
EnterCriticalSection
TlsAlloc
GlobalMemoryStatus
QueryPerformanceFrequency
OpenEventA
GetCurrentProcessId
RaiseException
LoadLibraryA
SetEvent
TerminateProcess
GetStartupInfoW
lstrcmpiA
CreateEventA
VirtualAlloc
CloseHandle
CompareFileTime
ResumeThread
DisableThreadLibraryCalls
LocalSize
GetSystemInfo
lstrcpynA
GetCurrentThreadId
LocalAlloc
ReleaseMutex
GetModuleHandleA
lstrlenW
HeapDestroy
GetLastError
QueryPerformanceCounter
MulDiv
GetCommandLineW
GetSystemTimeAsFileTime
WaitForSingleObject
SetThreadPriority
LocalReAlloc
InterlockedIncrement
GetModuleHandleW
lstrlenA
FindClose
UnhandledExceptionFilter
SystemTimeToFileTime
GetVersionExA
TlsSetValue
FreeConsole
MultiByteToWideChar
TlsGetValue
GetThreadPriority
GetCurrentThread
crypt32
CryptFormatObject
ole32
OleSaveToStream
CoMarshalInterface
CoCreateInstance
CoInitializeEx
OleUninitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
OleLoadFromStream
StringFromGUID2
CoUninitialize
CoGetInterfaceAndReleaseStream
OleInitialize
CoFileTimeNow
ReleaseStgMedium
CreateStreamOnHGlobal
CoTaskMemFree
CreateBindCtx
msvcrt
_vsnwprintf
memmove
_except_handler3
_initterm
free
_adjust_fdiv
malloc
Sections
.text Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE