Static task
static1
Behavioral task
behavioral1
Sample
5d9bae5d01f18c0846646ec8baa767b7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d9bae5d01f18c0846646ec8baa767b7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d9bae5d01f18c0846646ec8baa767b7_JaffaCakes118
-
Size
85KB
-
MD5
5d9bae5d01f18c0846646ec8baa767b7
-
SHA1
f99b1f442d571f66c8c41042d8466ad4ee42fb9d
-
SHA256
1047db59ea77c64e0a5505a4fd026d561d279a0628e9e133a71dadb38c13793d
-
SHA512
d381f48440467b71a86fec977cb8aa2cd5b8323b5ca5593192d17fd19f47ec926bdd063e1e48195cc3514e64825281ff7d935c75cbdbcfeaf32155df6944d78c
-
SSDEEP
1536:/Fq1noDnjctDJxUdfrfUIAZfcmLFxwRDRUMC/xgp6:/LjiDr6fDUzZklJed/xm6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d9bae5d01f18c0846646ec8baa767b7_JaffaCakes118
Files
-
5d9bae5d01f18c0846646ec8baa767b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
b271032dd124ea7e0a76e9d6aca5d0b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
joyGetPos
mciSendCommandA
timeGetTime
timeSetEvent
waveOutClose
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutUnprepareHeader
waveOutWrite
comdlg32
GetOpenFileNameA
PrintDlgA
gdi32
AnimatePalette
Arc
BitBlt
Chord
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateFontA
CreatePalette
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
EndDoc
EndPage
ExtFloodFill
ExtTextOutA
ExtTextOutW
GdiFlush
GetBkMode
GetBoundsRect
GetDIBits
GetDeviceCaps
GetNearestPaletteIndex
GetObjectA
GetPixel
GetRgnBox
GetStockObject
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsA
IntersectClipRect
LineTo
MoveToEx
PatBlt
Pie
Polygon
RealizePalette
Rectangle
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBoundsRect
SetPaletteEntries
SetROP2
SetTextAlign
SetTextColor
StartDocA
StartPage
StretchBlt
StretchDIBits
kernel32
BuildCommDCBA
ClearCommError
CloseHandle
CopyFileA
CreateDirectoryA
CreateEventA
CreateFileA
CreateProcessA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCommandLineA
GetCurrentDirectoryA
GetFileAttributesA
GetFileSize
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempFileNameA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MoveFileA
MultiByteToWideChar
PurgeComm
ReadFile
RemoveDirectoryA
ResetEvent
SetCommState
SetCommTimeouts
SetCurrentDirectoryA
SetEndOfFile
SetEvent
SetFileAttributesA
SetFilePointer
SetLastError
SetLocalTime
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteFile
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_beginthread
_cexit
_endthread
_iob
_onexit
_setmode
abort
atexit
fwrite
memcpy
memmove
memset
signal
strcat
strcpy
strrchr
vfprintf
shell32
SHFileOperationA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
user32
AdjustWindowRect
BeginPaint
ClientToScreen
ClipCursor
CloseClipboard
CreateCaret
CreateWindowExA
DefFrameProcA
DefWindowProcA
DestroyCaret
DestroyWindow
DispatchMessageA
EmptyClipboard
EndPaint
FillRect
GetAsyncKeyState
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetFocus
GetKeyState
GetMessageA
GetWindowLongA
GetWindowRect
HideCaret
InvalidateRect
InvertRect
IsClipboardFormatAvailable
KillTimer
LoadCursorA
LoadIconA
MessageBeep
MessageBoxA
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PtInRect
RedrawWindow
RegisterClassExA
ReleaseDC
ScreenToClient
ScrollDC
SendMessageA
SetCaretPos
SetClipboardData
SetCursor
SetCursorPos
SetTimer
ShowCaret
ShowWindow
SystemParametersInfoA
TranslateAcceleratorA
TranslateMDISysAccel
TranslateMessage
UpdateWindow
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE