Static task
static1
Behavioral task
behavioral1
Sample
3d39a78aeabcc4f73513963512c65d44_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3d39a78aeabcc4f73513963512c65d44_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3d39a78aeabcc4f73513963512c65d44_JaffaCakes118
-
Size
516KB
-
MD5
3d39a78aeabcc4f73513963512c65d44
-
SHA1
ab3da44200eb068721e046644744e0abf90be3c6
-
SHA256
59a895aea3a87aa4ec3843001ad96fddb64e7e519e44165862374717568217a4
-
SHA512
054e124466c9e3181ceef0d0ff1ee0a120d4f47f1671fda4805ecee313166a060c5be11d425f396ebc77890938a0e96bb49600aa0064622043d4bc001990441d
-
SSDEEP
12288:pxHnVzPdn/KQ0cr89xY6WcKR27b3NIJhUQmQOmBh3h2ao:pxJFyiDg7b3NIJqkbo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d39a78aeabcc4f73513963512c65d44_JaffaCakes118
Files
-
3d39a78aeabcc4f73513963512c65d44_JaffaCakes118.exe windows:4 windows x86 arch:x86
9535dab108cb8f9881a009e01bfc60b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
CreateThread
HeapAlloc
GetProcAddress
ReadFile
HeapDestroy
CreateThread
GetModuleFileNameA
lstrcmpiW
InterlockedExchange
LocalAlloc
FreeLibrary
InterlockedDecrement
SetLastError
VirtualAlloc
SetLastError
ReadFile
SetLastError
GetModuleHandleA
InterlockedDecrement
GetModuleFileNameW
HeapDestroy
CreateEventW
VirtualProtect
FreeLibrary
VirtualProtect
InterlockedCompareExchange
GetCurrentProcess
FreeLibrary
InterlockedDecrement
VirtualAlloc
HeapDestroy
GetProcessHeap
HeapFree
VirtualAlloc
SetLastError
VirtualProtect
QueryPerformanceCounter
GetProcAddress
LoadLibraryW
MultiByteToWideChar
CreateEventW
VirtualProtect
DeleteCriticalSection
HeapAlloc
EnterCriticalSection
VirtualAlloc
Sleep
InterlockedDecrement
QueryPerformanceCounter
InterlockedDecrement
lstrlenA
DeleteCriticalSection
VirtualProtect
InterlockedIncrement
GetModuleHandleA
ReadFile
InterlockedIncrement
GetModuleFileNameA
GetVersionExA
InitializeCriticalSection
HeapFree
QueryPerformanceCounter
LeaveCriticalSection
LoadLibraryA
GetModuleFileNameA
InterlockedDecrement
gdi32
Ellipse
CreateBitmapIndirect
Rectangle
MoveToEx
CreateRectRgn
GetCurrentObject
GetBrushOrgEx
CreateFontIndirectA
GetBrushOrgEx
CreateDIBitmap
SetWindowExtEx
CreateFontIndirectA
GetBrushOrgEx
SetWindowOrgEx
MoveToEx
Rectangle
SetBkColor
Polygon
Rectangle
CreateDIBSection
GetCurrentObject
GetWindowExtEx
SetWindowExtEx
CreateCompatibleDC
SetPixel
LineTo
StretchBlt
CombineRgn
SetBrushOrgEx
CreateSolidBrush
StretchBlt
Ellipse
CreateFontA
SelectObject
Rectangle
SetBrushOrgEx
LineTo
SetBkMode
SetBkColor
SetBkColor
SetTextColor
CreateCompatibleDC
CreateBitmapIndirect
GetWindowOrgEx
CreateSolidBrush
StretchBlt
PatBlt
GetWindowExtEx
GetWindowOrgEx
GetBkMode
CreateFontIndirectA
CreateCompatibleDC
SetBrushOrgEx
CreateBitmapIndirect
SetWindowOrgEx
Rectangle
SetWindowOrgEx
GetBkMode
CreateDIBSection
MoveToEx
GetBkMode
BitBlt
user32
SetWindowPos
DispatchMessageW
DefWindowProcW
LoadCursorW
PeekMessageW
SetWindowLongW
GetWindowRect
DefWindowProcW
PostMessageW
DefWindowProcW
GetClientRect
CreateWindowExW
GetDC
SendMessageW
EndDialog
SetWindowTextW
DestroyWindow
SetWindowLongW
LoadIconW
TranslateMessage
GetDesktopWindow
EnableWindow
GetClientRect
InvalidateRect
EndDialog
SetFocus
GetFocus
IsWindow
PeekMessageW
GetWindowRect
DestroyWindow
IsWindow
SetFocus
SetTimer
SetFocus
InvalidateRect
BeginPaint
ReleaseDC
SetWindowTextW
DestroyWindow
PostMessageW
GetWindowRect
GetDC
IsWindow
IsWindow
ReleaseDC
GetClientRect
PostQuitMessage
SetFocus
GetDC
PostQuitMessage
IsWindow
wsprintfA
DispatchMessageW
EndDialog
LoadIconW
GetWindowRect
LoadStringW
wsprintfA
PostMessageW
SetDlgItemTextW
IsDlgButtonChecked
SetWindowLongW
SetCursor
Sections
.text Size: 499KB - Virtual size: 964KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ