Static task
static1
Behavioral task
behavioral1
Sample
63bb1f61a243682e14ecaa9e99d6c86a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
63bb1f61a243682e14ecaa9e99d6c86a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63bb1f61a243682e14ecaa9e99d6c86a_JaffaCakes118
-
Size
827KB
-
MD5
63bb1f61a243682e14ecaa9e99d6c86a
-
SHA1
60fd8669a3253b9b0ed6b6c1797ef2f6c5eb9926
-
SHA256
911c44d9df447ddd3425fa375e779b1850097c13683463b3d9da339df8a308aa
-
SHA512
150f7ffe452f2155cefcb411f135e0d8dd925356381ecde61f057b68f519617acc770f43c0182b3216bee1948c041315deb778cf5275ae6ce5e4e57e53686719
-
SSDEEP
24576:zMg5xbaKevYrQIXkg1LCQWoRlylsm6o4:IseYQIUDo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63bb1f61a243682e14ecaa9e99d6c86a_JaffaCakes118
Files
-
63bb1f61a243682e14ecaa9e99d6c86a_JaffaCakes118.exe windows:4 windows x86 arch:x86
89f33743fcb4a419c2cdf9dda1a261e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStructA
WritePrivateProfileStructA
GetCurrentProcess
lstrcpyA
SetPriorityClass
GetShortPathNameA
GetSystemTimeAsFileTime
GlobalUnlock
CreateEventA
lstrcmpA
LoadLibraryExA
GlobalReAlloc
SetThreadPriority
MultiByteToWideChar
GetDriveTypeA
GetLogicalDrives
GetSystemTime
GetStartupInfoA
WritePrivateProfileStringA
GetPrivateProfileStringA
Sleep
CreateThread
WaitForSingleObject
CloseHandle
GetModuleFileNameA
FindResourceA
LoadResource
LockResource
MulDiv
GetTickCount
GlobalAlloc
GetFileAttributesA
ExitProcess
CopyFileA
CreateSemaphoreA
GetLastError
ReleaseSemaphore
GetFullPathNameA
FindNextFileA
TerminateThread
MoveFileA
CreateFileA
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateDirectoryA
FindFirstFileA
FindClose
WideCharToMultiByte
CreateProcessA
lstrcmpiA
DeleteFileA
GetTempPathA
GetTempFileNameA
GetPrivateProfileIntA
SetCurrentDirectoryA
GetCurrentDirectoryA
RemoveDirectoryA
SystemTimeToFileTime
GlobalLock
GlobalFree
GetModuleHandleA
user32
LoadCursorA
SetCursor
ClientToScreen
GetUpdateRect
BeginPaint
GetCursorPos
EndPaint
GetForegroundWindow
CopyRect
IsWindow
FindWindowA
PostMessageA
SetWindowLongA
SetParent
FindWindowExA
DefWindowProcA
IsChild
CheckMenuItem
SetWindowTextA
GetWindowDC
ReleaseDC
DestroyWindow
CreateDialogParamA
GetDlgItem
GetWindowRect
ScreenToClient
SetWindowPos
InvalidateRect
SendMessageA
GetDlgItemTextA
DrawTextA
SetForegroundWindow
ShowWindow
GetParent
TrackPopupMenu
ReleaseCapture
SetCapture
CreateWindowExA
IsWindowVisible
GetWindowLongA
GetClientRect
EnableWindow
LoadImageA
wsprintfA
GetSubMenu
EndDialog
MessageBoxA
GetAsyncKeyState
DispatchMessageA
GetMessageA
GetSystemMetrics
KillTimer
SetFocus
UnregisterClassA
FillRect
EnumDisplaySettingsA
SetRect
SystemParametersInfoA
CharPrevA
DestroyIcon
DestroyCursor
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetWindowRgn
wvsprintfA
CheckRadioButton
SetDlgItemInt
GetDlgItemInt
DrawIconEx
SetTimer
WindowFromPoint
RegisterClipboardFormatA
SetClassLongA
DialogBoxParamA
LoadBitmapA
IsDlgButtonChecked
CreatePopupMenu
DestroyMenu
PostQuitMessage
UpdateWindow
LoadMenuA
GetSystemMenu
InsertMenuA
GetMenuItemInfoA
InsertMenuItemA
LoadIconA
RegisterClassA
GetClassInfoA
RegisterWindowMessageA
LoadStringA
LoadAcceleratorsA
RemoveMenu
GetClassLongA
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
CharNextA
CallWindowProcA
SendDlgItemMessageA
PeekMessageA
SetDlgItemTextA
GetDC
GetWindowTextA
RegisterClassExA
CheckDlgButton
SetCursorPos
gdi32
DeleteDC
GetDIBits
SelectObject
CreateCompatibleDC
SetBkMode
SetTextColor
LineTo
MoveToEx
UpdateColors
RealizePalette
SelectPalette
BitBlt
CreateDIBSection
CreatePalette
GetDeviceCaps
CreateBrushIndirect
GetNearestColor
GetPixel
GetTextMetricsA
CreateFontA
CreateCompatibleBitmap
StretchBlt
ExtSelectClipRgn
Rectangle
IntersectClipRect
SetBkColor
GetStockObject
CreatePen
TextOutA
CreateRectRgn
CreatePolyPolygonRgn
GetTextExtentPoint32A
CreateSolidBrush
GetObjectA
RoundRect
GetBkColor
GetTextColor
DeleteObject
GetDIBColorTable
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExA
RegOpenKeyExA
shell32
ShellExecuteA
SHGetMalloc
DragQueryPoint
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconA
comctl32
ord17
ole32
CoCreateGuid
CoRevokeClassObject
RevokeDragDrop
OleUninitialize
OleInitialize
RegisterDragDrop
CoRegisterClassObject
CoInitialize
CLSIDFromString
CoCreateInstance
comdlg32
GetSaveFileNameA
GetOpenFileNameA
msvcrt
_XcptFilter
_onexit
__dllonexit
__CxxFrameHandler
_purecall
malloc
free
strtol
fwrite
qsort
ceil
__mb_cur_max
_isctype
_pctype
mbstowcs
wcstombs
??2@YAPAXI@Z
srand
sprintf
_except_handler3
toupper
fseek
ftell
realloc
fputc
memset
_exit
exit
memcmp
fgets
atoi
??3@YAXPAX@Z
strncpy
strlen
strcmp
strncmp
fprintf
sqrt
sin
pow
strcat
fopen
fread
fclose
strcpy
_mbsstr
memcpy
_CIpow
rand
_ftol
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_stricmp
_controlfp
_strnicmp
_strdup
Sections
.text Size: 273KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 25KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 516KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tqn Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE