Static task
static1
Behavioral task
behavioral1
Sample
3063bdae2b6cdcd61dfcc4d96aeae201_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3063bdae2b6cdcd61dfcc4d96aeae201_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3063bdae2b6cdcd61dfcc4d96aeae201_JaffaCakes118
-
Size
163KB
-
MD5
3063bdae2b6cdcd61dfcc4d96aeae201
-
SHA1
c6179c33a0945f4f81cfa35e7acb79cdfd926425
-
SHA256
f434b993fb60090de7e85983fac298fb136bac547087811ee2ffe03861f492e0
-
SHA512
6f9cd117214149f754975e26cb7fc4c3ffad6e04aef7fc2473e7a72443d4b3d55c229b1d08d836789967b1eb49d40638947985889d423d24314580b51a37dfe3
-
SSDEEP
3072:cKc4djM93biTjn06BEpXB6I73V3MlQXur7y3ZZSr0DiPWfzvEaZcU:cKtdC3biTj0eEx17hXur7y3DfDSWfVyU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3063bdae2b6cdcd61dfcc4d96aeae201_JaffaCakes118
Files
-
3063bdae2b6cdcd61dfcc4d96aeae201_JaffaCakes118.exe windows:6 windows x86 arch:x86
ca30433969fc8aab35702cbb0abc62c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
WaitForSingleObject
GetCurrentProcess
QueryPerformanceCounter
GetCurrentThreadId
WaitForSingleObject
SetEvent
QueryPerformanceCounter
LocalFree
WaitForSingleObject
GetTickCount
GetCurrentProcess
WaitForSingleObject
QueryPerformanceCounter
GetCurrentProcessId
FormatMessageW
GetModuleFileNameA
FormatMessageW
GetACP
QueryPerformanceCounter
GetCurrentProcess
MultiByteToWideChar
GetModuleHandleA
GetACP
SetEvent
GetModuleHandleA
GetACP
GetCurrentProcessId
FormatMessageW
GetModuleHandleA
GetCurrentProcess
SetEvent
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCommandLineW
GetModuleHandleW
SleepEx
GetCurrentProcessId
FormatMessageW
SetEvent
MultiByteToWideChar
MultiByteToWideChar
GetTickCount
GetCurrentThreadId
GetCurrentThreadId
GetCommandLineA
LocalFree
SetEvent
GetModuleHandleA
GetModuleHandleW
WaitForSingleObject
GetCommandLineW
WaitForSingleObject
GetModuleFileNameA
GetCommandLineW
GetCurrentProcessId
GetProcessHeap
FormatMessageW
GetACP
QueryPerformanceCounter
SetUnhandledExceptionFilter
LocalFree
GetCurrentProcessId
WaitForSingleObject
GetProcessHeap
GetModuleHandleW
SetUnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameA
WaitForSingleObject
SetEvent
GetModuleHandleW
SetUnhandledExceptionFilter
GetModuleHandleA
VirtualFree
LocalAlloc
WaitForSingleObject
GetCurrentThreadId
LocalFree
FormatMessageW
GetCurrentProcess
GetModuleHandleW
VirtualFree
SetEvent
GetCurrentProcess
GetTickCount
GetTickCount
GetModuleHandleW
MultiByteToWideChar
GetCommandLineA
VirtualFree
LocalAlloc
QueryPerformanceCounter
GetCommandLineA
LocalAlloc
WaitForSingleObject
GetModuleHandleW
GetTickCount
SetEvent
WaitForSingleObject
GetCurrentThreadId
MultiByteToWideChar
FormatMessageW
GetModuleHandleA
LocalAlloc
GetCurrentThreadId
MultiByteToWideChar
GetTickCount
GetCommandLineA
GetProcessHeap
VirtualFree
MultiByteToWideChar
GetCurrentProcess
GetTickCount
GetCurrentProcess
SetEvent
GetCurrentProcess
GetModuleFileNameA
WaitForSingleObject
WaitForSingleObject
GetCurrentProcessId
gdi32
DeleteObject
GetTextMetricsW
GetDeviceCaps
GetDeviceCaps
GetObjectW
DeleteDC
CreateCompatibleDC
MoveToEx
DeleteObject
GetStockObject
SelectObject
CreateCompatibleDC
MoveToEx
CreateCompatibleDC
DeleteObject
SelectObject
GetDeviceCaps
SetTextColor
PatBlt
GetStockObject
CreateCompatibleBitmap
CreateCompatibleBitmap
DeleteObject
DeleteObject
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject
GetTextMetricsW
GetTextMetricsW
GetObjectW
CreateCompatibleDC
PatBlt
GetDeviceCaps
GetTextMetricsW
LineTo
CreateCompatibleDC
GetDeviceCaps
SelectObject
GetObjectW
DeleteObject
SetTextColor
MoveToEx
SelectObject
SelectObject
DeleteDC
GetObjectW
SetTextColor
MoveToEx
GetDeviceCaps
LineTo
PatBlt
DeleteDC
CreateCompatibleBitmap
CreateCompatibleBitmap
GetTextMetricsW
MoveToEx
GetDeviceCaps
CreateCompatibleBitmap
LineTo
MoveToEx
SelectObject
MoveToEx
GetObjectW
CreateCompatibleBitmap
GetTextMetricsW
SetTextColor
LineTo
DeleteObject
SelectObject
DeleteDC
SetTextColor
DeleteObject
GetStockObject
LineTo
GetObjectW
CreateCompatibleBitmap
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
SetTextColor
DeleteDC
GetStockObject
BitBlt
PatBlt
CreateCompatibleDC
GetObjectW
GetStockObject
MoveToEx
LineTo
SetTextColor
PatBlt
CreateCompatibleDC
DeleteDC
GetStockObject
GetObjectW
CreateCompatibleBitmap
GetTextMetricsW
LineTo
DeleteDC
CreateCompatibleBitmap
GetStockObject
DeleteObject
DeleteObject
SelectObject
GetDeviceCaps
GetTextMetricsW
ntdll
NtAllocateVirtualMemory
user32
SetTimer
DestroyWindow
DestroyWindow
SendMessageW
CreateWindowExW
DestroyWindow
ReleaseDC
GetMessageW
CreateWindowExW
GetWindowRect
ReleaseDC
GetMessageW
GetDC
CreateWindowExW
GetDlgItem
PostMessageW
ShowWindow
LoadIconW
CreateWindowExW
GetWindowRect
ReleaseDC
ReleaseDC
LoadIconW
GetDC
GetWindowRect
ShowWindow
SendMessageW
SetTimer
GetWindowRect
GetMessageW
GetSystemMetrics
ShowWindow
LoadIconW
SetTimer
CreateWindowExW
DefWindowProcW
ReleaseDC
ShowWindow
ShowWindow
GetDC
GetWindowRect
GetDlgItem
ReleaseDC
ReleaseDC
SetTimer
GetSystemMetrics
ReleaseDC
GetSystemMetrics
CreateWindowExW
GetDC
CreateWindowExW
SetTimer
DestroyWindow
SendMessageW
LoadIconW
GetMessageW
DestroyWindow
GetMessageW
GetDC
SetTimer
GetDlgItem
CreateWindowExW
GetWindowRect
ReleaseDC
GetDC
SetTimer
GetWindowRect
DestroyWindow
DestroyWindow
DestroyWindow
DestroyWindow
GetSystemMetrics
ReleaseDC
GetDC
LoadIconW
PostMessageW
SendMessageW
ShowWindow
DefWindowProcW
GetWindowRect
ReleaseDC
SendMessageW
ShowWindow
DestroyWindow
ShowWindow
SetTimer
ReleaseDC
ReleaseDC
DestroyWindow
SendMessageW
SendMessageW
GetMessageW
CreateWindowExW
Sections
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ