Static task
static1
Behavioral task
behavioral1
Sample
63712164b23c4f210a57fa5353ad31fb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63712164b23c4f210a57fa5353ad31fb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63712164b23c4f210a57fa5353ad31fb_JaffaCakes118
-
Size
412KB
-
MD5
63712164b23c4f210a57fa5353ad31fb
-
SHA1
4cc8bc496d47b678740289b29df1cc7bb3c74154
-
SHA256
0a94f5a9a2e60fca79a0b99caed2812a5839cc89d709bd3d79973c512dcf6c81
-
SHA512
77719c91aefa42fcc1391c379d43a352121b055abf85e0eb711c7701ff23c306a4f41f1da23f65dc20796349d43e8f89a982b5fe7fb7318a19a755b4aac4ffd3
-
SSDEEP
6144:XJ0Hf3EuhdVhNd2CyTdhzIxI3atXzZsUnubds8dhopUgMJr/BNbhU9lIwty:XJw3zhdV/d21TdhL8ZpvpUhJjUdE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63712164b23c4f210a57fa5353ad31fb_JaffaCakes118
Files
-
63712164b23c4f210a57fa5353ad31fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
ed8f957d7d5fb04bc9e94ab7073c5cde
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MapWindowPoints
PostQuitMessage
SetWindowPos
IsWindow
PeekMessageA
GetDC
UnregisterClassA
ScreenToClient
GetActiveWindow
GetKeyState
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
IsWindowEnabled
SetForegroundWindow
EnableMenuItem
RegisterClassA
GetWindowLongA
SetTimer
DispatchMessageA
ReleaseDC
EndPaint
SetFocus
BeginPaint
DefWindowProcA
GetSystemMetrics
GetWindowRect
IsIconic
SetCapture
ReleaseCapture
SetWindowLongA
GetClientRect
GetFocus
IsWindowVisible
SystemParametersInfoA
CheckMenuItem
GetSubMenu
CreateWindowExA
GetDlgItem
SetCursor
ClientToScreen
LoadCursorA
TrackPopupMenu
GetDesktopWindow
FillRect
EndDialog
MessageBoxA
DialogBoxParamA
GetSysColor
PostMessageA
CallWindowProcA
kernel32
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
DeleteFileW
GetSystemTimeAsFileTime
GetLocaleInfoW
GetTimeZoneInformation
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
IsBadWritePtr
FatalAppExitA
RtlUnwind
GetSystemDefaultLangID
GetUserDefaultLangID
GetCommandLineW
GetSystemDefaultLCID
GetUserDefaultLCID
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
FileTimeToSystemTime
GetFileAttributesA
WaitForSingleObject
GetDriveTypeA
SetEndOfFile
HeapDestroy
HeapFree
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
GetLocaleInfoA
LocalAlloc
lstrcatA
ExpandEnvironmentStringsA
FreeEnvironmentStringsW
SetStdHandle
ResetEvent
GetOEMCP
VirtualAlloc
FindResourceA
Sleep
VirtualFree
UnmapViewOfFile
IsValidCodePage
SizeofResource
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
SetUnhandledExceptionFilter
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
LCMapStringW
LoadLibraryExW
GetLastError
LeaveCriticalSection
ExitProcess
CreateFileA
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
FindFirstFileW
CompareStringA
lstrcpyA
FindFirstFileA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
HeapReAlloc
SetErrorMode
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
GlobalAlloc
GetVersion
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
TlsSetValue
CreateThread
GetModuleHandleA
FindNextFileA
GetLocalTime
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
GetTempPathA
ole32
CoTaskMemFree
CoInitialize
CoCreateInstance
gdi32
GetStockObject
SetTextColor
SelectObject
CreateSolidBrush
DeleteDC
GetDeviceCaps
DeleteObject
advapi32
RegSetValueExW
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyExW
RegCloseKey
oleaut32
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocString
VariantClear
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ