Static task
static1
Behavioral task
behavioral1
Sample
65314f1aaa760c59c02b078c6afaa831_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
65314f1aaa760c59c02b078c6afaa831_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
65314f1aaa760c59c02b078c6afaa831_JaffaCakes118
-
Size
123KB
-
MD5
65314f1aaa760c59c02b078c6afaa831
-
SHA1
5298c22c3fc0cba831816312e1598674fc410ffe
-
SHA256
549bec613f6bb8d5a6854320353b404c41a90d018af1649295dcd0bd17ae81dc
-
SHA512
4f43409af6b7e48d908083c96a485562a6d3f3abd2490e82246e2705bc380de961fccb9f668a6db578ab8cd2837e6b387e4003b44167690917e27d696058fb56
-
SSDEEP
3072:A/AawRDVCg6eryN2U12aZ1xfvzT44IxzstEFa5gZH:YAav373nFC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65314f1aaa760c59c02b078c6afaa831_JaffaCakes118
Files
-
65314f1aaa760c59c02b078c6afaa831_JaffaCakes118.exe windows:4 windows x86 arch:x86
29a92d0396aab48d5621c9359287c13f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
shlwapi
PathFileExistsW
StrStrIW
uxtheme
OpenThemeData
DrawThemeBackground
CloseThemeData
kernel32
FileTimeToSystemTime
CloseHandle
GetFileTime
CreateFileW
GetSystemInfo
IsWow64Process
GetCurrentProcess
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalAddAtomW
CreateDirectoryW
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
FreeLibrary
GetDateFormatW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
GetProcessHeap
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetTimeFormatW
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
HeapReAlloc
GetStartupInfoW
ExitProcess
GetCommandLineW
QueryPerformanceCounter
GetTickCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetModuleFileNameW
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
HeapAlloc
HeapSize
HeapFree
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
MultiByteToWideChar
user32
IsWindowVisible
FindWindowW
CloseClipboard
MessageBoxW
EndDialog
UnregisterClassA
GetPropW
RemovePropW
SendMessageW
SetPropW
GetFocus
GetClientRect
BeginPaint
CallWindowProcW
GetWindowTextLengthW
GetWindowTextW
ShowWindow
EndPaint
SetForegroundWindow
DestroyWindow
CharNextW
ValidateRect
InvalidateRect
SetFocus
GetDlgCtrlID
GetParent
PostMessageW
SetClassLongW
DialogBoxParamW
GetDlgItem
OpenClipboard
LoadCursorW
GetCursorPos
WindowFromPoint
TrackMouseEvent
DefWindowProcW
wsprintfW
GetWindowLongW
SetWindowLongW
SystemParametersInfoW
EmptyClipboard
DrawFocusRect
SetClipboardData
FillRect
SetWindowTextW
gdi32
SetBkMode
GetStockObject
SetTextColor
SelectObject
CreateFontIndirectW
GetTextExtentExPointW
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
shell32
SHGetSpecialFolderPathW
ShellExecuteW
ole32
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemAlloc
oleaut32
VarUI4FromStr
comctl32
ord345
InitCommonControlsEx
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ