c:\swos
Static task
static1
Behavioral task
behavioral1
Sample
608ac177eab383568028a30487f48024_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
608ac177eab383568028a30487f48024_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
608ac177eab383568028a30487f48024_JaffaCakes118
-
Size
684KB
-
MD5
608ac177eab383568028a30487f48024
-
SHA1
96e43c7c8e8b89bb1834deb08d15752150d295be
-
SHA256
65f6ed435380d3402b22b8a2f5969292277f0e29001192a7d200eeca59377973
-
SHA512
31f553efddc6be448c50e7e21f160cd0f5f609d4ca480f609226a3a42f189ae09cbd0ce4d7df36e44c70825c800ce2a1f339ed06c7ae3143357034dd2fad88a4
-
SSDEEP
6144:VYWCqs8vUS9fIcIAMauJBuzpfMmq+tuX+nz8N3EgMhgFK+MBsn5gX5TRCOlpLIop:VYWCqpMWzRqAYSKFyBKeX51CkpqMz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 608ac177eab383568028a30487f48024_JaffaCakes118
Files
-
608ac177eab383568028a30487f48024_JaffaCakes118.exe windows:4 windows x86 arch:x86
1a9deba711a03da8d4fecd841d0cf437
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetQueryOptionA
FindNextUrlCacheEntryW
DeleteUrlCacheEntryA
FtpDeleteFileW
InternetGetConnectedStateExA
InternetOpenUrlW
FindNextUrlCacheEntryA
FindNextUrlCacheContainerW
user32
DestroyMenu
DestroyWindow
GetKeyboardType
DlgDirListA
LoadCursorW
DefWindowProcW
FindWindowA
SwitchToThisWindow
CharLowerBuffW
ShowWindow
GetThreadDesktop
IsMenu
CreatePopupMenu
PaintDesktop
MessageBoxIndirectW
HideCaret
CloseDesktop
CreateDialogParamA
GetMessageExtraInfo
IsWindowVisible
InflateRect
SetScrollRange
GetWindowRect
DrawEdge
GetOpenClipboardWindow
EnumDisplayDevicesA
SetDlgItemTextW
DdeAbandonTransaction
BroadcastSystemMessage
GetWindowDC
GetKeyboardLayoutList
SetPropW
SendNotifyMessageA
SetMenuContextHelpId
RegisterClassA
SetScrollInfo
RegisterClassExA
GetInputDesktop
GetMonitorInfoA
DialogBoxParamW
DdeSetUserHandle
CreateWindowExA
GetMenuDefaultItem
GetFocus
LoadIconW
SendInput
SetWindowTextA
CharLowerBuffA
ValidateRgn
RemoveMenu
GetMenu
ImpersonateDdeClientWindow
RegisterDeviceNotificationA
GetKBCodePage
MonitorFromPoint
CharUpperA
DdeSetQualityOfService
RealChildWindowFromPoint
ChangeMenuW
AnimateWindow
CharUpperBuffA
GetLastActivePopup
BringWindowToTop
DdeInitializeA
GetIconInfo
GetScrollRange
ChangeDisplaySettingsExA
GetSysColorBrush
GetSysColor
PostThreadMessageA
GetKeyboardLayout
CascadeWindows
MessageBoxA
RegisterWindowMessageA
SetWindowsHookExA
comctl32
DrawStatusTextW
ImageList_Replace
ImageList_GetImageInfo
CreateStatusWindowW
ImageList_SetDragCursorImage
ImageList_LoadImage
ImageList_DrawEx
ImageList_GetIconSize
CreateToolbar
ImageList_GetImageRect
InitMUILanguage
ImageList_EndDrag
CreateToolbarEx
ImageList_SetFlags
ImageList_SetIconSize
DrawStatusText
ImageList_DragLeave
ImageList_ReplaceIcon
CreatePropertySheetPage
DrawStatusTextA
CreateMappedBitmap
GetEffectiveClientRect
InitCommonControlsEx
ImageList_GetDragImage
kernel32
UnhandledExceptionFilter
HeapLock
GetFileType
GetStringTypeA
CompareStringW
ExitProcess
AllocConsole
GetStringTypeW
OpenMutexA
FindNextFileW
QueryPerformanceCounter
CreateEventW
CommConfigDialogA
LoadLibraryA
SetHandleCount
CopyFileA
GetCurrentThreadId
GetModuleHandleA
LCMapStringA
SetFilePointer
HeapDestroy
DosDateTimeToFileTime
GetCurrentProcess
GetEnvironmentStrings
GetStringTypeExA
GlobalSize
WideCharToMultiByte
GetTimeZoneInformation
GetProcessHeap
IsDebuggerPresent
InterlockedIncrement
GetTickCount
SystemTimeToFileTime
InitializeCriticalSection
WriteFile
GetLocaleInfoW
GetEnvironmentVariableW
CloseHandle
TerminateThread
GetModuleFileNameA
RemoveDirectoryA
RtlUnwind
TransmitCommChar
EnumSystemCodePagesW
FindFirstFileW
CompareStringA
GetSystemTimeAsFileTime
TlsAlloc
GetEnvironmentStringsW
GetTimeFormatA
InterlockedDecrement
WriteConsoleA
LeaveCriticalSection
GetCommandLineA
IsValidCodePage
HeapValidate
FlushFileBuffers
GetProcAddress
Sleep
SetEnvironmentVariableA
GetACP
IsValidLocale
TlsGetValue
GetCurrentThread
SetConsoleCtrlHandler
LCMapStringW
GetStdHandle
lstrcpynA
GetLocaleInfoA
GetVersionExA
WriteConsoleOutputCharacterA
WriteConsoleOutputCharacterW
HeapAlloc
OpenWaitableTimerW
LocalShrink
WriteConsoleInputW
GetCPInfo
GetComputerNameA
GetConsoleMode
HeapCreate
TlsSetValue
WaitNamedPipeW
VirtualFree
CreateFileA
FreeEnvironmentStringsA
EnumSystemLocalesA
WriteConsoleW
GetUserDefaultLCID
ReadFile
VirtualQuery
GetAtomNameA
VirtualAlloc
DeleteCriticalSection
GlobalHandle
FillConsoleOutputCharacterA
GetConsoleCP
GetLastError
HeapSize
GetCurrentProcessId
WaitForMultipleObjects
GetOEMCP
GetStartupInfoA
TlsFree
CreateMutexA
FreeLibrary
GetConsoleScreenBufferInfo
HeapReAlloc
EnterCriticalSection
SetLastError
CreateEventA
lstrcpyW
InterlockedExchange
SetStdHandle
GetDateFormatA
HeapFree
SetUnhandledExceptionFilter
TerminateProcess
RemoveDirectoryW
GetCurrentDirectoryW
GetConsoleOutputCP
FreeEnvironmentStringsW
MultiByteToWideChar
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 316KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ