Static task
static1
Behavioral task
behavioral1
Sample
3302c5c7eddf1c0ec5561db60635f482_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
3302c5c7eddf1c0ec5561db60635f482_JaffaCakes118
-
Size
242KB
-
MD5
3302c5c7eddf1c0ec5561db60635f482
-
SHA1
c8e605d129e3e708650dad06621de1d72d80de5b
-
SHA256
85dd8313fc11344b304da63b1f9a86659f2bb72424ad816657501c7e67bd5be0
-
SHA512
4160f6f53c3b88d10f6acd230f2e78cf2d16d7739e38f85ad7b3ecad42c1afd3f526bcdeed6f3658acec8b260af3735c813478f14a1f955c0191259948b808ea
-
SSDEEP
3072:zGgGnb3lR5ytdZCS6xA4aYgeFoB7AFssUUqnbi7Fz0MTUxu04EASjwiad1Ea+Z8i:6WCS6xABB0sntbm0MTsYEA1h+bhMLhW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3302c5c7eddf1c0ec5561db60635f482_JaffaCakes118
Files
-
3302c5c7eddf1c0ec5561db60635f482_JaffaCakes118.exe windows:4 windows x86 arch:x86
b4973a86f1dc54deac0bcca565e1f7af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerLanguageNameA
kernel32
GetModuleHandleA
GetSystemInfo
GetVersionExA
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA
WriteFile
GetDiskFreeSpaceA
WritePrivateProfileStringA
FindClose
FindFirstFileA
IsDBCSLeadByte
SetFilePointer
ReadFile
GetPrivateProfileIntA
GetLastError
GetTickCount
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
FindResourceA
GlobalHandle
GetUserDefaultLCID
LoadLibraryA
GetProfileStringA
SetErrorMode
GetFileSize
FreeLibrary
CreateFileA
GlobalLock
GlobalAlloc
CloseHandle
GlobalFree
_hread
GlobalUnlock
CreateDirectoryA
lstrlenA
lstrcpyA
WinExec
GetDriveTypeA
SetStdHandle
VirtualAlloc
LCMapStringW
GetProcAddress
HeapFree
HeapAlloc
LCMapStringA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetStringTypeA
RtlUnwind
GetStringTypeW
HeapCreate
HeapReAlloc
VirtualFree
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
HeapDestroy
ExitProcess
user32
DestroyWindow
EndDialog
DrawIcon
GetWindowPlacement
GetDlgItem
DialogBoxParamA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
LoadIconA
SetWindowTextA
InflateRect
SendMessageA
SetWindowLongA
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
InvalidateRect
LoadCursorA
GetClassInfoA
RegisterClassA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
DrawTextA
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetSystemMetrics
CharNextA
GetParent
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
SetRect
MoveWindow
GetSysColor
PostQuitMessage
CreateWindowExA
gdi32
RestoreDC
SelectObject
DeleteObject
GetObjectA
SaveDC
CreateFontIndirectA
MoveToEx
CreatePen
LineTo
SetBkColor
SetTextColor
ExtTextOutA
CreateSolidBrush
CreateDIBitmap
GetTextMetricsA
SelectPalette
GetDeviceCaps
RealizePalette
GetSystemPaletteEntries
UnrealizeObject
CreatePalette
BitBlt
CreateCompatibleDC
DeleteDC
CreateRectRgn
GetStockObject
SelectClipRgn
GetTextExtentPointA
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
denwtvk Size: 76KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE