Static task
static1
Behavioral task
behavioral1
Sample
416a516ca3c420fdea02a1d648bfaad2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
416a516ca3c420fdea02a1d648bfaad2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
416a516ca3c420fdea02a1d648bfaad2_JaffaCakes118
-
Size
44KB
-
MD5
416a516ca3c420fdea02a1d648bfaad2
-
SHA1
478666e8d5945aa13cd27f527f15ed706c4cf05d
-
SHA256
d727488589142bdb1163f410968718442325995796323ce3f2be70148e06ccbf
-
SHA512
aed72838a3046c98c9a802e5ce40b38378d4b84e2f559e41672df4efa004ed2aaeb4193dde07154a6a9dfde5dc9bb8c42e7628aeafabe60fcc3cff5d98e6ed76
-
SSDEEP
768:+6yYaMDVAF71iX0dMCFf5UEg+Pvzcfp8wyyvy6lFV1ndYdm:+6LDa60Xfg+wfp8wS6bu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 416a516ca3c420fdea02a1d648bfaad2_JaffaCakes118
Files
-
416a516ca3c420fdea02a1d648bfaad2_JaffaCakes118.exe windows:4 windows x86 arch:x86
d20f0bed056ee2d852d0a91617ad1c49
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetNamedPipeHandleStateA
FindFirstVolumeW
LockFile
lstrcat
GetNumberOfConsoleMouseButtons
OpenFileMappingW
CreateProcessA
GetConsoleHardwareState
VirtualProtect
QueryDosDeviceA
CreateTapePartition
SetConsoleWindowInfo
GetDiskFreeSpaceA
SetFileApisToOEM
GetPrivateProfileStructW
GetFileType
GetVolumeNameForVolumeMountPointA
GetTapeParameters
GetCommProperties
user32
SetDlgItemInt
WCSToMBEx
SetCursor
GetLastInputInfo
MapDialogRect
wvsprintfW
DdeCmpStringHandles
GetClassNameW
IsCharAlphaNumericA
GetSysColorBrush
DdeCreateStringHandleA
InvalidateRect
EmptyClipboard
GetUpdateRect
IMPGetIMEA
DdeUninitialize
GetAppCompatFlags
ShowOwnedPopups
ShowScrollBar
EnumDesktopWindows
SendMessageCallbackA
SetWindowsHookW
EnumPropsExW
SetCaretBlinkTime
GetKeyboardLayout
GetWindowModuleFileName
GetClipboardFormatNameW
LoadCursorA
SetClipboardData
SetParent
CharToOemBuffA
SetShellWindowEx
GetMenuItemInfoA
wsprintfA
GetMenuDefaultItem
GetDoubleClickTime
VkKeyScanW
OpenWindowStationW
FindWindowA
GetMessageW
GetDCEx
GetMonitorInfoW
CreateAcceleratorTableW
MessageBoxIndirectA
CallWindowProcW
SetFocus
gdi32
CreateMetaFileW
STROBJ_dwGetCodePage
CreateRoundRectRgn
RemoveFontResourceW
CreatePen
PATHOBJ_bEnumClipLines
GdiArtificialDecrementDriver
NamedEscape
GdiPrinterThunk
FONTOBJ_cGetGlyphs
GetEnhMetaFileA
GetCharABCWidthsW
GetFontData
SetMetaRgn
Escape
FontIsLinked
GdiGetDC
SelectObject
XFORMOBJ_iGetXform
GetGlyphOutline
CreateFontIndirectExA
SetArcDirection
DeviceCapabilitiesExW
EnableEUDC
ExtEscape
UpdateICMRegKeyW
StretchBlt
GdiAddGlsBounds
SetPolyFillMode
EngMultiByteToWideChar
CreateFontW
SetRelAbs
CreatePolygonRgn
EngUnicodeToMultiByteN
ResizePalette
GetMetaFileA
GdiEntry10
comdlg32
ReplaceTextW
ChooseColorW
FindTextA
PrintDlgExA
LoadAlterBitmap
PrintDlgW
PageSetupDlgW
ChooseFontW
dwOKSubclass
GetFileTitleA
GetSaveFileNameA
psapi
GetDeviceDriverFileNameW
EnumProcesses
GetModuleFileNameExW
GetDeviceDriverFileNameA
GetDeviceDriverBaseNameW
GetModuleBaseNameW
EmptyWorkingSet
GetMappedFileNameA
InitializeProcessForWsWatch
GetProcessMemoryInfo
GetModuleFileNameExA
GetWsChanges
GetDeviceDriverBaseNameA
EnumDeviceDrivers
EnumProcessModules
comctl32
ImageList_GetImageInfo
ImageList_DrawEx
_TrackMouseEvent
FlatSB_EnableScrollBar
DrawInsert
ImageList_Duplicate
ImageList_LoadImage
ImageList_Read
CreatePropertySheetPage
CreateToolbar
ImageList_GetIconSize
MenuHelp
ImageList_SetBkColor
InitMUILanguage
FlatSB_SetScrollRange
CreatePropertySheetPageW
ImageList_GetFlags
DllGetVersion
FlatSB_GetScrollPos
InitCommonControls
ImageList_DragLeave
ImageList_DragShowNolock
ImageList_GetBkColor
Sections
.text Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE