Static task
static1
Behavioral task
behavioral1
Sample
30de1d4ecec623071e6e4a1574e4e15f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30de1d4ecec623071e6e4a1574e4e15f_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30de1d4ecec623071e6e4a1574e4e15f_JaffaCakes118
-
Size
308KB
-
MD5
30de1d4ecec623071e6e4a1574e4e15f
-
SHA1
5603f578e945340504350fcc0628a9bcb3095397
-
SHA256
d6c3e3aeea1061c8e4e704abf25ed022bb53c9708f693cf22e1dde11047aca25
-
SHA512
9d906260be70c3db048c100e5558375e24ed566d632ed612c8533950a623b311bbf4cc11f04256b5330771abb2059bb8086fa7aafee8535a7c5c427f6a1fe8f5
-
SSDEEP
6144:s0hTVt1GHOmlXXDyc4l/61htZlY95d1YKgLjdznD+FWt14t:rTEXXX+cCadU1DKhiWt1s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30de1d4ecec623071e6e4a1574e4e15f_JaffaCakes118
Files
-
30de1d4ecec623071e6e4a1574e4e15f_JaffaCakes118.exe windows:1 windows x86 arch:x86
5fe6e034ec52d4cf1902fb3ce8fa3158
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InterlockedDecrement
GlobalLock
SetErrorMode
GetLastError
RaiseException
GetNumberFormatW
VirtualAlloc
GetDateFormatW
lstrcmpiW
GetProcessHeaps
SetEndOfFile
InterlockedIncrement
GetModuleHandleA
lstrlenW
FreeLibrary
GetSystemTimeAsFileTime
LoadLibraryW
GetFileAttributesW
lstrcmpW
GetFileTime
GlobalAlloc
GetTimeFormatW
IsDBCSLeadByte
lstrcpynW
lstrlenA
GetCurrentThreadId
UnhandledExceptionFilter
lstrcpyW
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
GetModuleHandleW
HeapSize
GlobalUnlock
InterlockedExchange
FileTimeToSystemTime
GlobalReAlloc
CloseHandle
GetCurrentProcess
FindFirstFileW
SetUnhandledExceptionFilter
CreateFileW
FileTimeToLocalFileTime
GetThreadLocale
GetTempPathW
HeapAlloc
GlobalFree
lstrcatW
MulDiv
GetStartupInfoW
TerminateProcess
GetProcessHeap
GetFileSize
GetExitCodeThread
MultiByteToWideChar
LoadLibraryA
LocalFree
FindClose
CreateDirectoryW
GetTempFileNameW
GetLocaleInfoW
GetProcAddress
LocalAlloc
GetACP
user32
TranslateMessage
GetMessageA
CreateWindowExA
ShowWindow
SendMessageA
RegisterClassExA
DispatchMessageA
UpdateWindow
DestroyWindow
DefWindowProcA
gdi32
EnumFontFamiliesExW
StretchBlt
Rectangle
SetDIBColorTable
CreateDCW
SetBrushOrgEx
StretchDIBits
SetStretchBltMode
CreateSolidBrush
GetTextMetricsW
GetTextExtentPoint32W
ExtTextOutW
DeleteDC
GetBkMode
CreateRectRgnIndirect
SetTextColor
SetViewportExtEx
CreateCompatibleDC
GetCurrentObject
UnrealizeObject
GetObjectW
ResizePalette
SetTextAlign
Polyline
GetNearestColor
CreateICW
FillRgn
SetROP2
LineTo
SelectObject
Polygon
RestoreDC
SetBkColor
CreateHalftonePalette
OffsetRgn
PatBlt
GetDIBColorTable
EnumFontFamiliesW
CreatePatternBrush
RealizePalette
RectVisible
Ellipse
GetNearestPaletteIndex
TextOutW
GetPaletteEntries
SetDIBitsToDevice
GetPixel
PtVisible
PlayMetaFile
MoveToEx
SetMapMode
CreatePalette
RoundRect
CreateFontIndirectW
ExtFloodFill
GetStockObject
SelectPalette
SaveDC
GetTextColor
CreateCompatibleBitmap
CreateBitmap
BitBlt
PolyBezier
DeleteObject
SetPixel
GetDeviceCaps
SetDIBits
SetPaletteEntries
SetBkMode
CreateDIBSection
GetDIBits
CreatePolygonRgn
LPtoDP
CreatePen
TranslateCharsetInfo
Escape
msvcrt
_ltow
__p__fmode
__p__commode
__wgetmainargs
_initterm
_CxxThrowException
_cexit
_purecall
_wcmdln
__argc
_adjust_fdiv
__setusermatherr
_c_exit
_beginthreadex
_controlfp
_wcsdup
_wtol
wcschr
_onexit
_wsplitpath
__set_app_type
rand
_itow
wcscat
_wtoi
free
_except_handler3
_XcptFilter
__wargv
exit
wcscmp
_getdcwd
_wcsicmp
_exit
Sections
.text Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ