Static task
static1
Behavioral task
behavioral1
Sample
4ca91629e358fa3f3c473720ebdde021_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4ca91629e358fa3f3c473720ebdde021_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ca91629e358fa3f3c473720ebdde021_JaffaCakes118
-
Size
800KB
-
MD5
4ca91629e358fa3f3c473720ebdde021
-
SHA1
e5558fd492af448bcac1010e02fed68ff8ea57b5
-
SHA256
860910728dc5e929cd61593ada052ce36b6c1e45493fa2be68edd6ddeb687aa3
-
SHA512
952bbc555f065753d94fdac28949af7400cc653eeb4ba6166c07e93fc05381898826d80827b773e007727f9878116ad2ccf0087a60c3c21b408c37dca177cfbe
-
SSDEEP
12288:SE4n9E4spWN0eDcuHgsBXkBgU7THoMv/NgkdNPPBluBTzJUBSPnE:StnCpUcXsBkHjFd1uBTNUwPE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ca91629e358fa3f3c473720ebdde021_JaffaCakes118
Files
-
4ca91629e358fa3f3c473720ebdde021_JaffaCakes118.exe windows:4 windows x86 arch:x86
2c1384eb90cbb0049c107f5610d8e475
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
SetViewportOrgEx
GetCharWidthW
PolyBezier
CreatePatternBrush
SetColorAdjustment
CreatePen
CreateDCW
DrawEscape
CreatePolyPolygonRgn
BeginPath
GetObjectW
CheckColorsInGamut
SetBkColor
GetCharABCWidthsFloatW
UpdateColors
CreateScalableFontResourceA
GetDeviceCaps
CreateScalableFontResourceW
GetCharacterPlacementW
ExtCreateRegion
user32
SetMenuItemInfoW
DispatchMessageA
GetDlgCtrlID
RegisterDeviceNotificationW
MessageBoxExA
OemToCharBuffA
CreateWindowExA
MessageBoxW
LoadAcceleratorsW
WaitMessage
GetDlgItemTextW
GetClipboardFormatNameA
IntersectRect
SetCursor
SetDoubleClickTime
ChangeMenuA
RegisterDeviceNotificationA
GetFocus
CopyIcon
DestroyWindow
CallMsgFilterA
GetMenuItemCount
EnumPropsW
DestroyCursor
DdeAbandonTransaction
CharNextA
KillTimer
GetMessageExtraInfo
ShowWindow
MenuItemFromPoint
GetKeyboardState
RegisterClassA
GetDC
GetMessageA
InSendMessageEx
RegisterClassExA
GetScrollInfo
PackDDElParam
CopyAcceleratorTableA
DefWindowProcA
GetUpdateRgn
CheckMenuItem
MessageBeep
kernel32
ReadFile
CreateMutexA
OpenMutexA
QueryPerformanceCounter
GetCurrentThread
CreateFileMappingA
TlsFree
MultiByteToWideChar
HeapFree
LCMapStringA
GetLocaleInfoW
IsBadWritePtr
HeapDestroy
SetEnvironmentVariableA
GetEnvironmentStrings
RtlUnwind
IsValidCodePage
GetSystemInfo
GetCurrentProcess
CompareStringW
SetHandleCount
UnhandledExceptionFilter
FindFirstFileExA
LCMapStringW
GetCurrentThreadId
lstrcpynA
VirtualProtect
GetModuleHandleA
lstrcmpi
WriteFile
GetStartupInfoW
SetFilePointer
VirtualProtectEx
GetStdHandle
GetProcAddress
InitializeCriticalSection
GetStringTypeA
SetStdHandle
GetSystemDirectoryA
GetCommandLineW
GetStringTypeW
LocalSize
GetTimeZoneInformation
HeapCreate
HeapAlloc
GetTimeFormatA
SetConsoleTitleW
IsValidLocale
GetDateFormatA
GetLocaleInfoA
GetTimeFormatW
TlsAlloc
WideCharToMultiByte
EnumSystemLocalesA
GetACP
FreeEnvironmentStringsA
LeaveCriticalSection
GetModuleFileNameW
GetSystemTimeAsFileTime
EnterCriticalSection
SetLastError
HeapSize
TlsGetValue
LoadLibraryA
GetEnvironmentStringsW
VirtualQuery
TlsSetValue
ReleaseSemaphore
FreeEnvironmentStringsW
HeapReAlloc
GetOEMCP
GetModuleFileNameA
GetCurrentProcessId
LockFileEx
GetCommandLineA
TerminateProcess
GetVersionExA
ExitProcess
CompareStringA
DeleteCriticalSection
GetFileType
SetComputerNameW
GetTickCount
CloseHandle
GetCPInfo
InterlockedExchange
GetUserDefaultLCID
GetLastError
VirtualFree
GetStartupInfoA
FindNextChangeNotification
VirtualAlloc
FlushFileBuffers
LoadResource
comctl32
CreatePropertySheetPageW
InitCommonControlsEx
Sections
.text Size: 204KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ