Static task
static1
Behavioral task
behavioral1
Sample
2bf639e706c3a2d5803ecff6c563c793_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
2bf639e706c3a2d5803ecff6c563c793_JaffaCakes118
-
Size
59KB
-
MD5
2bf639e706c3a2d5803ecff6c563c793
-
SHA1
166df4b6a050caf160ed0587960bc0681ec03c27
-
SHA256
242da795580d5e573572c165aece2c46cc93edc08d9746e0c1c25833de78a9cd
-
SHA512
0ea339381ec76b733e4aa470160d538fc5f7789b2934ce0356dc3ed40abbcc9631550a89ff1d87561d6557e544276d1bfa4fc955b566d6212083974a3820d147
-
SSDEEP
384:WFx6COzx6COOYYhmDL8Bn3lxSAh3iUMMhZzsTWYAgs/YTlXZ4a4vTSG5TEGqsVZO:9u+/SIiUMMvsyIsFa2SGb9p8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bf639e706c3a2d5803ecff6c563c793_JaffaCakes118
Files
-
2bf639e706c3a2d5803ecff6c563c793_JaffaCakes118.exe windows:4 windows x86 arch:x86
33b5105ed464adc63dfc985547054f19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetSysColorBrush
KillTimer
GetWindowDC
GetSystemMetrics
GetUserObjectInformationW
PostMessageW
SetTimer
GetSysColorBrush
KillTimer
CharUpperW
CharUpperA
GetSysColor
GetDC
CharUpperW
GetProcessWindowStation
GetUserObjectInformationW
RegisterClipboardFormatA
GetProcessWindowStation
GetUserObjectInformationW
GetSysColor
GetUserObjectInformationW
GetWindowLongW
RegisterClipboardFormatA
TranslateMessage
RegisterClipboardFormatA
RegisterWindowMessageA
RegisterClipboardFormatA
GetUserObjectInformationW
RegisterClipboardFormatA
RegisterWindowMessageA
GetWindowThreadProcessId
PostMessageW
GetWindowThreadProcessId
GetUserObjectInformationW
GetWindowThreadProcessId
RegisterWindowMessageA
TranslateMessage
RegisterWindowMessageA
TranslateMessageEx
GetWindowThreadProcessId
GetSysColorBrush
GetSysColor
RegisterWindowMessageA
ReleaseDC
GetWindowDC
SetScrollInfo
CharUpperA
ReleaseDC
SetScrollInfo
RegisterClipboardFormatA
PostMessageW
GetProcessWindowStation
KillTimer
GetWindowDC
GetWindowDC
SetScrollInfo
GetUserObjectInformationW
RegisterWindowMessageA
GetProcessWindowStation
SetTimer
GetSysColor
PostMessageW
CharUpperW
TranslateMessage
GetSystemMetrics
PostMessageW
CharUpperA
GetSysColor
PostMessageW
GetWindowLongW
CharUpperW
GetUserObjectInformationW
CharUpperA
CharUpperA
TranslateMessageEx
PostMessageW
PostMessageW
CharUpperA
GetSysColorBrush
GetUserObjectInformationW
GetSysColorBrush
DispatchMessageW
SetTimer
GetSystemMetrics
RegisterClipboardFormatA
GetProcessWindowStation
GetWindowThreadProcessId
KillTimer
GetProcessWindowStation
GetWindowLongW
SetScrollInfo
TranslateMessage
GetSysColorBrush
SetScrollInfo
PostMessageW
CharUpperW
KillTimer
GetSystemMetrics
GetWindowDC
GetWindowThreadProcessId
MapVirtualKeyExW
GetWindowThreadProcessId
CharUpperA
DispatchMessageW
SetTimer
GetAppCompatFlags2
DispatchMessageW
TranslateMessageEx
DispatchMessageW
SetTimer
GetUserObjectInformationW
CharUpperA
CharUpperA
GetSystemMetrics
GetAppCompatFlags2
TranslateMessageEx
GetAppCompatFlags2
CharUpperW
GetWindowDC
GetWindowLongW
RegisterWindowMessageA
TranslateMessage
TranslateMessageEx
GetUserObjectInformationW
GetSystemMetrics
KillTimer
DispatchMessageW
SetScrollInfo
RegisterClipboardFormatA
GetAppCompatFlags2
GetSysColorBrush
GetUserObjectInformationW
GetProcessWindowStation
TranslateMessage
RegisterClipboardFormatA
GetWindowLongW
GetProcessWindowStation
GetUserObjectInformationW
SetTimer
RegisterWindowMessageA
PostMessageW
GetProcessWindowStation
SetTimer
GetDC
GetUserObjectInformationW
GetWindowThreadProcessId
GetWindowLongW
GetWindowDC
CharUpperW
TranslateMessageEx
GetWindowLongW
DispatchMessageW
KillTimer
GetSysColor
GetWindowDC
GetWindowThreadProcessId
GetWindowThreadProcessId
GetWindowThreadProcessId
RegisterWindowMessageA
GetWindowDC
TranslateMessage
ReleaseDC
GetProcessWindowStation
SetTimer
GetProcessWindowStation
PostMessageW
GetUserObjectInformationW
GetSysColor
GetSysColor
RegisterClipboardFormatA
SetScrollInfo
GetAppCompatFlags2
SetTimer
SetTimer
PostMessageW
RegisterWindowMessageA
PostMessageW
GetAppCompatFlags2
GetUserObjectInformationW
ReleaseDC
GetProcessWindowStation
GetSysColorBrush
GetSystemMetrics
GetWindowDC
GetProcessWindowStation
SetTimer
DispatchMessageW
GetWindowLongW
GetDC
PostMessageW
GetWindowLongW
GetAppCompatFlags2
RegisterClipboardFormatA
SetScrollInfo
GetWindowDC
GetUserObjectInformationW
GetSysColorBrush
GetAppCompatFlags2
CharUpperA
SetTimer
GetProcessWindowStation
kernel32
ReadProcessMemory
ReadProcessMemory
GetSystemTime
LoadLibraryA
GetSystemTime
LoadLibraryExA
ReadFile
GetStartupInfoW
CreateProcessW
LoadLibraryExW
Sleep
WaitForSingleObject
VirtualProtect
LoadLibraryExA
SleepEx
GetStartupInfoA
VirtualProtect
LoadLibraryExA
GetStartupInfoW
GetSystemTime
ReadProcessMemory
LoadLibraryExA
WaitForSingleObject
GetStartupInfoW
CreateFileA
WriteProcessMemory
VirtualProtect
ReadProcessMemory
GetStartupInfoW
LoadLibraryExW
GetStartupInfoA
CreateFileA
ReadProcessMemory
LoadLibraryA
GetStartupInfoW
CreateProcessW
GetSystemTimeAsFileTime
GetSystemTime
GetSystemTimeAsFileTime
VirtualProtect
VirtualProtectEx
LoadLibraryExW
ReadFile
WriteProcessMemory
VirtualProtectEx
LoadLibraryExA
LoadLibraryExA
WriteProcessMemory
GetStartupInfoW
ReadProcessMemory
WaitForSingleObject
CreateProcessW
SleepEx
GetStartupInfoW
LoadLibraryA
CreateProcessW
GetStartupInfoW
ReadProcessMemory
GetSystemTimeAsFileTime
CreateProcessW
GetStartupInfoA
TerminateProcess
TerminateProcess
WriteProcessMemory
Sleep
CreateProcessA
Sleep
CreateProcessA
TerminateProcess
VirtualProtectEx
LoadLibraryExA
VirtualProtectEx
GetSystemTimeAsFileTime
LoadLibraryA
ReadProcessMemory
ReleaseMutex
ReadProcessMemory
VirtualProtect
GetStartupInfoW
Sleep
VirtualProtectEx
GetSystemTime
GetStartupInfoA
ReadFile
VirtualProtect
CreateFileA
WriteProcessMemory
ReadProcessMemory
ReleaseMutex
ReleaseMutex
GetSystemTime
ReleaseMutex
GetSystemTimeAsFileTime
CreateFileA
CreateProcessA
CreateProcessW
GetStartupInfoW
ReadProcessMemory
WaitForSingleObject
ReadProcessMemory
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntW
SetLocalTime
ReleaseMutex
WriteProcessMemory
ReleaseMutex
ReadFile
CreateProcessA
Sleep
CreateProcessW
ReleaseMutex
SleepEx
GetSystemTimeAsFileTime
VirtualProtectEx
GetStartupInfoW
CreateProcessA
GetSystemTime
GetStartupInfoW
TerminateProcess
VirtualProtect
TerminateProcess
LoadLibraryExW
GetSystemTimeAsFileTime
ReleaseMutex
ReadFile
TerminateProcess
TerminateProcess
CreateProcessA
GetStartupInfoA
SleepEx
LoadLibraryExW
CreateProcessW
TerminateProcess
CreateProcessW
VirtualProtectEx
ReleaseMutex
LoadLibraryA
LoadLibraryExW
VirtualProtectEx
GetStartupInfoA
ReleaseMutex
LoadLibraryExA
LoadLibraryExW
LoadLibraryA
TerminateProcess
ReadProcessMemory
ReleaseMutex
WriteProcessMemory
TerminateProcess
GetSystemTime
SleepEx
WaitForSingleObject
WriteProcessMemory
TerminateProcess
VirtualProtect
CreateProcessA
GetStartupInfoA
VirtualProtect
WriteProcessMemory
CreateProcessW
LoadLibraryExA
ReadFile
WriteProcessMemory
Sleep
ReadFile
GetSystemTimeAsFileTime
LoadLibraryExW
CreateProcessA
TerminateProcess
SleepEx
VirtualProtect
ReadFile
WriteProcessMemory
CreateProcessA
Sleep
GetStartupInfoW
CreateProcessA
CreateFileA
TerminateProcess
GetStartupInfoW
GetStartupInfoA
GetSystemTimeAsFileTime
GetSystemTime
TerminateProcess
CreateFileA
GetSystemTime
GetSystemTimeAsFileTime
VirtualProtect
GetStartupInfoA
ReadProcessMemory
LoadLibraryExA
LoadLibraryExA
ReleaseMutex
LoadLibraryA
CreateProcessA
VirtualProtectEx
WriteProcessMemory
CreateProcessA
LoadLibraryExW
CreateProcessW
GetSystemTimeAsFileTime
LoadLibraryA
GetStartupInfoA
Sections
.text Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 68KB
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 980B
IMAGE_SCN_MEM_READ