h:\egzi\yll\e
Static task
static1
Behavioral task
behavioral1
Sample
3008ab68ecaf4881bd0f81636ff88461_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3008ab68ecaf4881bd0f81636ff88461_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3008ab68ecaf4881bd0f81636ff88461_JaffaCakes118
-
Size
872KB
-
MD5
3008ab68ecaf4881bd0f81636ff88461
-
SHA1
e68dd53e2200c19240d7b6e8fdd280120447baf0
-
SHA256
f0e1c4d1d2c5c6c5c30ae36684c6185788c5a30d8de2308dc75f414ebaeb84a7
-
SHA512
4f5e39a17e0d23ec67360a987b954d846279d999c04756337663968f111dc316b6e406786811db922a735d14afe3fc09a5f3f1b1f0bfacb84582a5f76724b37a
-
SSDEEP
24576:Qv7+mrE5BE6IXgLc2ZD8PR6ZF9IgC2dcU:QFcu6IXkFjSgC2+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3008ab68ecaf4881bd0f81636ff88461_JaffaCakes118
Files
-
3008ab68ecaf4881bd0f81636ff88461_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9e7ab05bbc3b1dc0fdd3286c7a1c591
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
shell32
SHUpdateRecycleBinIcon
ShellAboutA
SHQueryRecycleBinA
SHGetDesktopFolder
wininet
InternetGetCookieW
RunOnceUrlCache
InternetTimeFromSystemTimeA
InternetCombineUrlA
ShowSecurityInfo
ShowCertificate
user32
DefDlgProcW
GetMonitorInfoA
RegisterClassA
CallMsgFilterW
RegisterClassExA
AdjustWindowRect
GetCapture
GetNextDlgTabItem
GetClipboardSequenceNumber
DefWindowProcA
CharNextExA
OemToCharA
MessageBoxA
TileChildWindows
SetWindowTextA
SystemParametersInfoW
CreateWindowExA
SetWindowsHookExW
CreateWindowStationW
IsCharAlphaW
SetKeyboardState
OpenDesktopW
InvertRect
DestroyWindow
ShowWindow
SetMenuItemInfoA
SetDlgItemTextW
NotifyWinEvent
DlgDirSelectComboBoxExW
GetClassNameA
IsDialogMessageA
AdjustWindowRectEx
LoadIconW
GetMenuDefaultItem
DlgDirListW
ToUnicode
comctl32
InitMUILanguage
ImageList_DragLeave
ImageList_Draw
ImageList_DragEnter
ImageList_ReplaceIcon
DestroyPropertySheetPage
ImageList_SetBkColor
ImageList_Replace
InitCommonControlsEx
comdlg32
GetSaveFileNameA
kernel32
SetComputerNameW
GetStartupInfoW
GetNamedPipeInfo
DeleteCriticalSection
InterlockedIncrement
GetEnvironmentStringsW
SetStdHandle
GetLastError
LCMapStringA
FreeLibrary
GetStdHandle
GetTimeZoneInformation
GlobalUnfix
GetStringTypeA
GetPrivateProfileSectionNamesW
HeapReAlloc
OpenSemaphoreW
GetProcAddress
CompareStringA
GetVolumeInformationW
GetConsoleTitleA
GlobalAlloc
HeapFree
GetLocaleInfoA
IsBadReadPtr
MultiByteToWideChar
GetCurrentThread
SetFileAttributesA
GetFileType
SetUnhandledExceptionFilter
GetTimeFormatA
WideCharToMultiByte
CompareStringW
InterlockedExchange
CreateFileA
LeaveCriticalSection
FoldStringW
GetCompressedFileSizeW
TlsSetValue
CloseHandle
CreateMutexA
FreeEnvironmentStringsW
GetVolumeInformationA
GetProcessShutdownParameters
RaiseException
ReadFileEx
RtlUnwind
DebugBreak
SetCurrentDirectoryW
SetConsoleCtrlHandler
SetEnvironmentVariableA
GetTempFileNameW
GetCurrentProcessId
WriteConsoleA
WriteConsoleOutputA
InterlockedDecrement
IsDebuggerPresent
FoldStringA
SetFilePointer
GetUserDefaultLCID
ExitProcess
FreeEnvironmentStringsA
GetCurrentProcess
GetConsoleCP
GetModuleHandleA
GetFileAttributesExW
OpenMutexA
lstrlenA
SetConsoleTextAttribute
ReadConsoleOutputA
ReadConsoleInputW
FlushFileBuffers
GetStringTypeW
ReadConsoleOutputCharacterW
LoadLibraryA
IsValidLocale
TlsFree
QueryPerformanceCounter
GetCPInfo
TlsAlloc
GlobalSize
LoadLibraryW
HeapAlloc
FindResourceExW
GetModuleFileNameW
GetTickCount
GetModuleHandleW
GetConsoleOutputCP
GetACP
WriteFile
TlsGetValue
OutputDebugStringW
LocalCompact
WriteProfileStringW
HeapValidate
HeapDestroy
AddAtomW
GetVersionExW
EnterCriticalSection
FindFirstFileA
GetEnvironmentVariableW
GetMailslotInfo
SetCurrentDirectoryA
FindAtomA
GetSystemTimeAsFileTime
GetCommandLineA
GetProfileStringA
GetModuleFileNameA
GetThreadContext
GetStartupInfoA
VirtualFree
GetLocaleInfoW
EnumSystemLocalesA
WriteConsoleW
GlobalGetAtomNameA
TerminateProcess
SetThreadIdealProcessor
GetDateFormatA
GetCommandLineW
ReadFile
HeapSize
HeapCreate
WriteProfileStringA
VirtualQuery
GetOEMCP
IsValidCodePage
OutputDebugStringA
SetLastError
GetEnvironmentVariableA
GetConsoleMode
LCMapStringW
ReadConsoleOutputW
SetConsoleCP
GetDiskFreeSpaceExW
GetTimeFormatW
TransmitCommChar
UnhandledExceptionFilter
OpenMutexW
GetCurrentThreadId
SetHandleCount
GlobalFlags
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetEnvironmentStrings
GetShortPathNameW
VirtualAlloc
EnumResourceNamesA
VirtualQueryEx
CreateSemaphoreA
VirtualProtect
GetPrivateProfileSectionNamesA
Sleep
gdi32
GetICMProfileA
GetBitmapBits
SetWinMetaFileBits
DeleteDC
EnumFontFamiliesW
CreatePalette
GetTextCharset
CreateDCA
SetDeviceGammaRamp
GetMapMode
GetGlyphOutline
GetFontData
EnumICMProfilesW
DeleteEnhMetaFile
GetStretchBltMode
GetKerningPairs
DeleteObject
GetRandomRgn
SetWorldTransform
Ellipse
GetObjectA
Pie
GetDeviceCaps
SetArcDirection
SelectObject
PtVisible
GetPolyFillMode
Sections
.text Size: 224KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 484KB - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ