Static task
static1
Behavioral task
behavioral1
Sample
437d160beda03ca6c5a23c7913719972_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
437d160beda03ca6c5a23c7913719972_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
437d160beda03ca6c5a23c7913719972_JaffaCakes118
-
Size
744KB
-
MD5
437d160beda03ca6c5a23c7913719972
-
SHA1
a44bf6ff0b57e05b52610b330951a03ef5afb7df
-
SHA256
ddfc6ecef185c3bc0df65e197f725b4b671c8706a690be1c7a55e98d1f886bce
-
SHA512
ec1f73c870f8afaf7c285af42a3e826e17a7e07047b95f44d3187c55446170bdd3a8a1f40cb0996fdae2997dfc25a7080200f91cb816a735e5e784c5e6bfd761
-
SSDEEP
12288:nAvKhzSIpRZ4ZS41rBy7SnfuiU40HwHJbSuMVQFE3t5qZibFJcpZz5:AvKhrPaBASnfgi0g1Zi7c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 437d160beda03ca6c5a23c7913719972_JaffaCakes118
Files
-
437d160beda03ca6c5a23c7913719972_JaffaCakes118.exe windows:4 windows x86 arch:x86
67843e1920c72a32e6fb7bb36ab0d97c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
GetDiskFreeSpaceExW
InterlockedExchange
SetFilePointer
GetOEMCP
SetLastError
CreateMutexA
ReadFile
Sleep
GlobalCompact
VirtualFree
LoadLibraryA
GetCurrentProcess
FreeLibrary
FindAtomA
GetVersionExA
GetEnvironmentStrings
GetStdHandle
HeapCreate
GlobalUnfix
GetConsoleOutputCP
WaitCommEvent
LockFileEx
FlushFileBuffers
GetModuleFileNameA
GetLocaleInfoA
QueryPerformanceCounter
LCMapStringA
InterlockedIncrement
ExitProcess
TlsAlloc
HeapSize
GetACP
WideCharToMultiByte
SetHandleCount
GetModuleHandleA
VirtualAllocEx
GetLocaleInfoW
GetEnvironmentStringsW
GetCommandLineA
GetConsoleCP
GetCurrentThreadId
LCMapStringW
DeleteAtom
SetStdHandle
WritePrivateProfileStructA
GetProcessHeap
FreeEnvironmentStringsA
InterlockedDecrement
SetUnhandledExceptionFilter
GlobalLock
GetConsoleMode
GetSystemTimeAsFileTime
VirtualAlloc
GetDateFormatA
WriteConsoleA
EnumTimeFormatsW
OpenMutexA
lstrlenW
WriteFile
OpenFileMappingW
EnterCriticalSection
LoadResource
HeapLock
InitializeCriticalSection
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
IsValidCodePage
GetDriveTypeA
SystemTimeToFileTime
GetCPInfo
TlsFree
FreeEnvironmentStringsW
GetProcessHeaps
TransactNamedPipe
GetCurrentThread
HeapAlloc
GetCurrentProcessId
ReadConsoleOutputA
HeapFree
GlobalFindAtomW
EnumResourceLanguagesW
lstrcmpi
SetEnvironmentVariableA
CompareStringW
SetConsoleCtrlHandler
ConvertDefaultLocale
GetTickCount
GetLogicalDriveStringsA
VirtualQuery
CloseHandle
TlsGetValue
FlushInstructionCache
IsValidLocale
GetFileType
GetTimeFormatA
ExpandEnvironmentStringsA
SetThreadLocale
WriteConsoleW
SetTimeZoneInformation
AllocConsole
GetProcAddress
CreateFileA
GetCommandLineW
DebugBreak
DosDateTimeToFileTime
DeleteCriticalSection
GetStringTypeW
HeapDestroy
CreatePipe
LeaveCriticalSection
GetStartupInfoA
GetLastError
CompareStringA
GetThreadTimes
GetTimeZoneInformation
MultiByteToWideChar
RtlUnwind
HeapReAlloc
TerminateThread
TlsSetValue
GetStringTypeA
EnumSystemLocalesA
gdi32
CreateDCW
BeginPath
GetPolyFillMode
GetAspectRatioFilterEx
CreatePenIndirect
GetDeviceCaps
SetPixelV
GetSystemPaletteUse
PlgBlt
FillRgn
GetObjectW
DeleteDC
SelectObject
SetSystemPaletteUse
comctl32
CreateMappedBitmap
CreatePropertySheetPageW
ImageList_SetFlags
MakeDragList
ImageList_DragLeave
ImageList_DragEnter
ImageList_Create
DrawStatusText
ImageList_GetBkColor
InitCommonControlsEx
ImageList_Draw
shell32
RealShellExecuteExW
user32
GetKeyNameTextA
TranslateMDISysAccel
BroadcastSystemMessage
DialogBoxIndirectParamW
SetParent
RegisterWindowMessageA
DefWindowProcW
MessageBoxW
OemToCharA
LoadImageW
GetWindowInfo
CharNextExA
SetCursor
RegisterClassExA
DragDetect
SendNotifyMessageW
CharToOemA
RegisterClassA
DestroyWindow
EnumWindows
CloseClipboard
CreateWindowExW
SetUserObjectInformationW
SetCapture
GetWindowTextW
SendNotifyMessageA
DestroyAcceleratorTable
SendDlgItemMessageA
DdePostAdvise
DialogBoxParamA
DdeInitializeA
WindowFromDC
GetTabbedTextExtentA
MapVirtualKeyA
SystemParametersInfoW
GetClipboardOwner
RegisterDeviceNotificationW
CharUpperA
DialogBoxParamW
IsZoomed
MessageBoxExA
MenuItemFromPoint
ShowWindow
SetClipboardData
SetActiveWindow
SetWindowsHookExA
DdeCreateDataHandle
UnhookWindowsHookEx
CharPrevExA
SetMessageExtraInfo
GetOpenClipboardWindow
GetMenuContextHelpId
ChangeMenuW
wininet
FindFirstUrlCacheEntryExA
RetrieveUrlCacheEntryFileW
FtpPutFileEx
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 448KB - Virtual size: 447KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ