Static task
static1
Behavioral task
behavioral1
Sample
436f3fbcaddb9d4909870176a4eaa637_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
436f3fbcaddb9d4909870176a4eaa637_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
436f3fbcaddb9d4909870176a4eaa637_JaffaCakes118
-
Size
512KB
-
MD5
436f3fbcaddb9d4909870176a4eaa637
-
SHA1
222ec5138c85014410d9faa07c03a7f62b2dccc9
-
SHA256
4ad42f2e9538619cdf60fd1f13e9e1c331ce79de8c9d058497fc657d29f92327
-
SHA512
3d6a73e3ffa9662c9d919d913730fdaf0df0ef234a447ea1c7740df63f76fceed82d95a20ad11057f9c042fc0f77cbf38f6a06579ae74599d74cf5ef1e1177d9
-
SSDEEP
12288:GgQT7Vs0dMTeWm9ea/SpVD4H/MW/Wm7MDgTuaZxZMma:Hy1dMTeWmB/SQJt7kgqSM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436f3fbcaddb9d4909870176a4eaa637_JaffaCakes118
Files
-
436f3fbcaddb9d4909870176a4eaa637_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e128daec013b7400c20d7bce87f4e21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
_TrackMouseEvent
InitCommonControlsEx
kernel32
GlobalFree
GetModuleFileNameA
GetProcAddress
MultiByteToWideChar
lstrlenA
CloseHandle
GetCurrentThread
GetStartupInfoW
GlobalAlloc
GetModuleHandleW
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcpynW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetLastError
CreateMutexW
GetCommandLineW
GetVersionExW
InterlockedExchange
GetModuleFileNameW
CreateDirectoryW
GetFileAttributesW
GlobalUnlock
GlobalLock
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceW
user32
DrawTextW
SetRect
InflateRect
GetMessageW
GetWindowTextW
DispatchMessageW
FindWindowW
SetForegroundWindow
BringWindowToTop
GetMenuState
GetSystemMenu
DrawIconEx
GetSystemMetrics
GetClassNameW
GetClassInfoExW
RegisterWindowMessageW
CallWindowProcW
LoadImageW
PostQuitMessage
PostMessageW
SetWindowTextW
GetClientRect
MessageBoxW
DrawAnimatedRects
EnumChildWindows
GetWindowRect
LoadIconW
FlashWindow
SetWindowPos
IsWindow
DestroyWindow
SetFocus
CheckDlgButton
SetDlgItemInt
GetDlgItem
SendDlgItemMessageW
EndPaint
ShowWindow
IsIconic
FindWindowA
SendMessageTimeoutW
SendMessageW
DrawIcon
EndDialog
DialogBoxParamW
CreateDialogParamW
GetWindowDC
GetCapture
SetCapture
ReleaseCapture
IntersectRect
GetDC
ReleaseDC
IsZoomed
OffsetRect
GetActiveWindow
PtInRect
WindowFromPoint
SetCursor
FindWindowExW
IsWindowVisible
EnumThreadWindows
SetWindowRgn
RedrawWindow
InvalidateRect
GetWindow
SystemParametersInfoW
MapWindowPoints
DrawFocusRect
GetParent
ScreenToClient
ClientToScreen
DefWindowProcW
LoadCursorW
RegisterClassExW
SetWindowLongW
CallNextHookEx
GetClassInfoW
SetWindowsHookExW
CreateWindowExW
UnhookWindowsHookEx
GetWindowLongW
LoadMenuW
GetSubMenu
GetCursorPos
TrackPopupMenu
DestroyMenu
KillTimer
SetTimer
GetDlgItemInt
IsDlgButtonChecked
EnableWindow
BeginPaint
TranslateMessage
UpdateWindow
gdi32
CreateFontIndirectW
StretchBlt
CreateRectRgnIndirect
GetTextExtentPoint32W
CombineRgn
CreateRoundRectRgn
GetStockObject
CreateRectRgn
SelectClipRgn
ExcludeClipRect
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
RoundRect
Rectangle
CreatePen
MoveToEx
LineTo
SetBkColor
ExtTextOutW
DeleteObject
CreateSolidBrush
SetBkMode
SetTextColor
SelectObject
advapi32
RegOpenKeyExW
MapGenericMask
RevertToSelf
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
AccessCheck
RegQueryValueExW
RegCloseKey
GetFileSecurityW
ImpersonateSelf
OpenThreadToken
shell32
ShellExecuteW
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
ole32
CoFreeLibrary
CreateStreamOnHGlobal
CoLoadLibrary
oleaut32
SafeArrayAccessData
SafeArrayUnaccessData
msvcp60
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
msvcrt
fclose
strrchr
_snprintf
fflush
_splitpath
strncat
strncpy
fwrite
_purecall
__CxxFrameHandler
_vsnprintf
wcslen
_vsnwprintf
_snwprintf
free
malloc
??2@YAPAXI@Z
__p___wargv
__p___argc
_ftol
wcscmp
wcsrchr
_wcsicmp
toupper
wcschr
_wcsdup
wcsncpy
__dllonexit
_onexit
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
fopen
__p__fmode
_except_handler3
__set_app_type
_controlfp
gdiplus
GdipDrawImageRectI
GdipImageSelectActiveFrame
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
GdipGetImageHeight
GdipGetImageWidth
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCloneImage
GdipDisposeImage
GdipDeleteGraphics
GdipDrawImageRectRectI
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipGetImagePixelFormat
GdipCloneBitmapAreaI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipLoadImageFromStreamICM
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
%!W Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE