Static task
static1
Behavioral task
behavioral1
Sample
3ec9e49a47470595b234c975813ef186_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ec9e49a47470595b234c975813ef186_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3ec9e49a47470595b234c975813ef186_JaffaCakes118
-
Size
44KB
-
MD5
3ec9e49a47470595b234c975813ef186
-
SHA1
edb20a8f8dfbf38ff264a821583a36136a8561d7
-
SHA256
61d3cd16d1e661073aa56070d798dc5324e108d0cada20938adcf39c32c7bd76
-
SHA512
fc93cbc97ee90dc4ce91c342f4e001f26bb1ced9db6b726a4d287f713163e43397666e96c19f20535e2de98730713babde7e43b6de33eed2c501771e0ee87a6b
-
SSDEEP
768:+pDxvejfbg0AZcNzp+ZgUDDeGc12KBnpjg548L3c7MtSNGu2:+HejjzzaguI1JFWM7ceG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ec9e49a47470595b234c975813ef186_JaffaCakes118
Files
-
3ec9e49a47470595b234c975813ef186_JaffaCakes118.exe windows:4 windows x86 arch:x86
9bb15c72b057ac23012c4c18959f4547
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
VirtualProtect
GetCurrentDirectoryW
lstrcatA
VirtualUnlock
GetTimeFormatA
ReadConsoleOutputW
GetLongPathNameA
WriteProfileSectionA
SystemTimeToTzSpecificLocalTime
GetNamedPipeHandleStateA
LocalReAlloc
WriteConsoleOutputAttribute
GetVolumePathNameA
GetThreadTimes
GetQueuedCompletionStatus
GetCalendarInfoA
SetLastConsoleEventActive
EnumCalendarInfoA
EnumSystemLocalesW
BackupSeek
ShowConsoleCursor
user32
SetDlgItemInt
InSendMessage
wvsprintfA
SwitchToThisWindow
SendDlgItemMessageW
DdeUnaccessData
UserRealizePalette
DrawIcon
GetClassLongW
GetAltTabInfoA
SetScrollRange
GetMessageTime
DialogBoxParamA
ToUnicode
CreateDesktopA
SendIMEMessageExW
WINNLSGetEnableStatus
PeekMessageW
DdeFreeDataHandle
EnumDisplaySettingsW
DdeAccessData
SetFocus
LookupIconIdFromDirectory
ChangeDisplaySettingsW
DispatchMessageW
DdeCmpStringHandles
ReuseDDElParam
EndMenu
GetMessagePos
TranslateAcceleratorW
IsDialogMessageW
GetCursorFrameInfo
RegisterDeviceNotificationA
SwapMouseButton
User32InitializeImmEntryTable
IsCharUpperW
SetSystemCursor
GetDlgItem
GetKeyboardState
GetUserObjectInformationA
GetDialogBaseUnits
CharToOemW
GetWinStationInfo
SetRect
IMPQueryIMEA
SetClassWord
PaintDesktop
PrivateExtractIconsA
gdi32
SetMapMode
SetTextJustification
GdiSwapBuffers
SetPixel
ExtTextOutA
GetLogColorSpaceA
ScaleViewportExtEx
FixBrushOrgEx
GetSystemPaletteEntries
PATHOBJ_bEnumClipLines
PlayEnhMetaFileRecord
PathToRegion
GetWorldTransform
NamedEscape
ColorMatchToTarget
GdiSetBatchLimit
GetPixelFormat
GetCharABCWidthsW
GdiCreateLocalEnhMetaFile
TextOutW
EngQueryEMFInfo
Rectangle
EngAlphaBlend
STROBJ_dwGetCodePage
GetTextFaceW
GetCurrentObject
STROBJ_bEnum
SetEnhMetaFileBits
comdlg32
PrintDlgExW
ChooseColorA
CommDlgExtendedError
FindTextW
ChooseFontA
Ssync_ANSI_UNICODE_Struct_For_WOW
GetOpenFileNameW
ReplaceTextA
dwLBSubclass
PrintDlgA
GetSaveFileNameW
PageSetupDlgA
GetFileTitleW
psapi
GetProcessMemoryInfo
EmptyWorkingSet
GetModuleFileNameExA
GetDeviceDriverFileNameW
EnumProcessModules
GetDeviceDriverBaseNameW
EnumDeviceDrivers
GetDeviceDriverBaseNameA
GetModuleBaseNameA
QueryWorkingSet
GetWsChanges
GetModuleFileNameExW
GetMappedFileNameW
GetModuleInformation
comctl32
CreateToolbarEx
ImageList_LoadImageA
ImageList_ReplaceIcon
ImageList_SetDragCursorImage
FlatSB_SetScrollProp
PropertySheetW
CreatePropertySheetPageA
InitCommonControlsEx
ImageList_Draw
UninitializeFlatSB
ImageList_GetImageCount
DestroyPropertySheetPage
ImageList_BeginDrag
ImageList_Create
ImageList_DragMove
ImageList_AddIcon
ImageList_Merge
ImageList_EndDrag
PropertySheet
ImageList_SetImageCount
CreateStatusWindow
ImageList_Remove
FlatSB_GetScrollProp
ImageList_GetImageRect
ImageList_SetFlags
InitializeFlatSB
ImageList_Write
FlatSB_SetScrollInfo
GetMUILanguage
MakeDragList
ImageList_GetIcon
Sections
.text Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE