Static task
static1
Behavioral task
behavioral1
Sample
63057ab4e4e069b122fb40e84a7ea346_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63057ab4e4e069b122fb40e84a7ea346_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63057ab4e4e069b122fb40e84a7ea346_JaffaCakes118
-
Size
560KB
-
MD5
63057ab4e4e069b122fb40e84a7ea346
-
SHA1
b7bdc2cca281d4c563330bf893a322c5aa0a46e0
-
SHA256
8ebce80b099969fd595a4fc403b579d39d102e4b73d917fcc98742ee73469940
-
SHA512
513060dac7bf21555c3f3f91c6b557e9a0b63292b788a31ce36a64eea9dfebbfe1ad9d4bc8e81017bbb0eee5ea056f29cc2bf22e874ad5e02ec190b74cdd973d
-
SSDEEP
12288:rZDTuiasVWwfeWzdGpMfY3fuO1EJDg9iabj3rqjdWa+s:VDTuiasVWYeWzhQq1g9iUbi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63057ab4e4e069b122fb40e84a7ea346_JaffaCakes118
Files
-
63057ab4e4e069b122fb40e84a7ea346_JaffaCakes118.exe windows:4 windows x86 arch:x86
f8c73e0b1138c0706ef6faaa6fc8982d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
HeapFree
ExitProcess
TerminateProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
CreateThread
ExitThread
GetLocalTime
RaiseException
HeapReAlloc
HeapSize
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProfileStringA
FlushFileBuffers
GetCurrentProcess
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
MulDiv
SetLastError
lstrcpynA
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GlobalUnlock
GlobalFree
LockResource
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
CreateFileW
QueryPerformanceCounter
Sleep
SetThreadPriority
ResumeThread
WideCharToMultiByte
MultiByteToWideChar
GetTimeZoneInformation
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
GetSystemTime
LoadLibraryA
GetProcAddress
CreateEventA
WaitForSingleObject
ResetEvent
LeaveCriticalSection
EnterCriticalSection
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
CloseHandle
GetFileSize
GetDriveTypeA
SetFilePointer
DeviceIoControl
ReadFile
DeleteFileA
GetVolumeInformationA
GetLastError
FormatMessageA
lstrlenA
LocalAlloc
LocalFree
GetSystemDefaultLangID
FindResourceA
LoadResource
SizeofResource
GetLogicalDrives
user32
InflateRect
ScreenToClient
GetTopWindow
GetCapture
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
LoadStringA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
PtInRect
GetDC
ReleaseDC
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
LoadIconA
SetTimer
AppendMenuA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
PostQuitMessage
PostMessageA
GetSysColor
EnableWindow
MessageBoxA
KillTimer
UpdateWindow
LoadCursorA
SetCursor
InvalidateRect
GetSysColorBrush
SetWindowPos
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
GetSystemMenu
DefDlgProcA
CharNextA
IsWindowUnicode
ModifyMenuA
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DestroyMenu
ShowWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
SetFocus
CopyRect
AdjustWindowRectEx
WinHelpA
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
PatBlt
CreateBitmap
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateSolidBrush
comdlg32
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
comctl32
ord17
oleaut32
SysAllocStringLen
Sections
.text Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ