Static task
static1
Behavioral task
behavioral1
Sample
383639bc40c6865b52cadb3dfeb29934_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
383639bc40c6865b52cadb3dfeb29934_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
383639bc40c6865b52cadb3dfeb29934_JaffaCakes118
-
Size
515KB
-
MD5
383639bc40c6865b52cadb3dfeb29934
-
SHA1
36297956ee0bd4b3eaba685518f5269f3518db52
-
SHA256
8e3c940000fede578066ec2292f66b5882cf3ff810ae62cb1e3be12808f4dbc0
-
SHA512
4c7de1b848f8f060919f4dcfe9841d04d437824ef44845f5861ca9bed298fbd19582853324ac3f582c4bcf6434efa098518928332058f19716f5a56a3757306a
-
SSDEEP
12288:UK3yjQCkiUdbWtpNRFFN++2QeRudUJgBtIwr3:GZyOjfm/RxgXIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 383639bc40c6865b52cadb3dfeb29934_JaffaCakes118
Files
-
383639bc40c6865b52cadb3dfeb29934_JaffaCakes118.exe windows:4 windows x86 arch:x86
3857b1fb01b03b848ac835f359cbf0e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
FindTextW
ChooseColorA
ChooseColorW
FindTextA
wininet
InternetHangUp
GopherCreateLocatorA
UnlockUrlCacheEntryStream
FtpSetCurrentDirectoryA
InternetReadFile
InternetShowSecurityInfoByURL
RunOnceUrlCache
SetUrlCacheConfigInfoA
shell32
DoEnvironmentSubstW
SheGetDirA
SHGetPathFromIDListA
CheckEscapesW
SHGetPathFromIDListW
kernel32
ExitProcess
GetLocaleInfoA
OpenMutexA
SetLastError
SleepEx
FlushFileBuffers
MultiByteToWideChar
GetCPInfo
CreateMutexA
IsValidLocale
FreeLibrary
GetACP
GetCommandLineA
GetCurrentThreadId
HeapValidate
VirtualFree
GetConsoleCP
SetHandleCount
GetEnvironmentStringsW
GetCurrentThread
GetConsoleOutputCP
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentStrings
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
HeapReAlloc
GetModuleFileNameA
GetCurrentProcess
CreateFileA
IsValidCodePage
HeapDestroy
LCMapStringA
WriteConsoleA
GetConsoleMode
HeapFree
GetStringTypeA
CloseHandle
Sleep
GetPrivateProfileIntW
LCMapStringW
SetStdHandle
InterlockedDecrement
GetUserDefaultLCID
OutputDebugStringW
CompareStringA
FreeEnvironmentStringsA
TlsFree
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
GetTickCount
HeapSize
GetOEMCP
LocalReAlloc
TlsSetValue
FlushConsoleInputBuffer
ReadConsoleInputA
RaiseException
EnumSystemLocalesA
GetProcessHeap
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetModuleHandleA
lstrlenA
TerminateProcess
TlsAlloc
FreeEnvironmentStringsW
GetLocaleInfoW
SetEnvironmentVariableA
VirtualQuery
TlsGetValue
LoadLibraryA
VirtualAlloc
ReadFile
WideCharToMultiByte
WriteFile
HeapCreate
GetStartupInfoA
LocalFree
SetFilePointer
GetTimeFormatA
UnhandledExceptionFilter
IsBadReadPtr
GetStdHandle
GetStringTypeW
GetFileType
CreateFileW
InterlockedExchange
DebugBreak
OutputDebugStringA
RtlUnwind
HeapAlloc
GetLastError
DeleteCriticalSection
LeaveCriticalSection
GetDateFormatA
GetProcessAffinityMask
QueryPerformanceCounter
GetCurrentProcessId
WriteConsoleW
CompareStringW
EnterCriticalSection
InterlockedIncrement
GetTimeZoneInformation
gdi32
GetOutlineTextMetricsW
DeleteDC
StrokeAndFillPath
CombineRgn
SetDIBitsToDevice
GetDeviceCaps
ResetDCW
AbortDoc
CreateEnhMetaFileW
StretchBlt
OffsetViewportOrgEx
GetCharWidth32A
CreateDiscardableBitmap
EnableEUDC
PlayMetaFile
LineDDA
PolylineTo
CreateDCW
FlattenPath
SetBkColor
GetLogColorSpaceW
EnumFontsA
LPtoDP
GetWindowOrgEx
PlayEnhMetaFileRecord
GetDeviceGammaRamp
comctl32
InitCommonControlsEx
user32
EnumThreadWindows
CreateWindowStationA
RegisterClassExA
GetPropA
GetWindowRect
ShowWindow
CreateMenu
GetDlgItemTextA
CreateWindowExA
ChildWindowFromPointEx
DispatchMessageW
GrayStringA
ReleaseDC
CharPrevExA
RegisterClassA
DeferWindowPos
IsCharAlphaW
GetAncestor
MenuItemFromPoint
MessageBoxW
CascadeWindows
ValidateRect
BroadcastSystemMessage
Sections
.text Size: 358KB - Virtual size: 357KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ