Static task
static1
Behavioral task
behavioral1
Sample
6966152143f7366ee4f4f1368372f515_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6966152143f7366ee4f4f1368372f515_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6966152143f7366ee4f4f1368372f515_JaffaCakes118
-
Size
44KB
-
MD5
6966152143f7366ee4f4f1368372f515
-
SHA1
63fea206c20b3fb365469240bc6a47631f848afe
-
SHA256
49bbc58773b83138b4c9350f1248143e5f5838acc5af8613ef83a2d6086c03b0
-
SHA512
16d9bea25ca9b7af6314db4f547dfa0ffff8efbdc16aa7aaed089d83ce22dac3b18acd4f733ccd441b96bb0c9067cf0895a2269349f794b4faa245797aaf2889
-
SSDEEP
768:korjPpNWJC435x8oPFw10w3QvuIPcT7NVyXlAaFstUvU4no:tpNCC435xxPFg0wqPoR04tQU4no
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6966152143f7366ee4f4f1368372f515_JaffaCakes118
Files
-
6966152143f7366ee4f4f1368372f515_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca03667148c9506cc4202c52b63af29a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
SetCurrentDirectoryA
GetModuleFileNameA
GetTickCount
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
FormatMessageA
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
WaitForSingleObject
CreateProcessA
IsBadCodePtr
CloseHandle
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetStringTypeW
user32
SetWindowLongA
SetWindowRgn
InvalidateRect
SetForegroundWindow
SetActiveWindow
SetFocus
ReleaseCapture
ShowCursor
LoadIconA
RegisterClassExA
MessageBoxA
CreateWindowExA
ShowWindow
UpdateWindow
BeginPaint
EndPaint
PostQuitMessage
LoadCursorA
SetCursor
DefWindowProcA
SetWindowPos
SetCapture
FindWindowA
PeekMessageA
MsgWaitForMultipleObjects
DispatchMessageA
GetCursorPos
SetCursorPos
PostMessageA
wsprintfA
SystemParametersInfoA
gdi32
DeleteObject
GetStockObject
CreateFontIndirectA
shell32
ShellExecuteA
uitgge
_gge_FreePicture@4
??3uezAnimateEx@@SGXPAX@Z
??1uezAnimateEx@@QAE@XZ
_gge_GetPictureRegion_F@0
?AddFrame@uezAnimateEx@@QAGXPAVtag_gge_Picture@@HHHKK0K@Z
_gge_DxDrawCleanup@0
??2uezAnimateEx@@SGPAXI@Z
_gge_LoadGif@8
_gge_LoadBitmap@8
_gge_ModeNormal@16
PrimarySurface
Param1
BackSurface
DescSurface
DX
??0uezAnimateEx@@QAE@PAUIDirectDrawSurface@@@Z
Display
BackSurfaceRect
gge_Flip
?gge_BltFast@@YGXXZ
Picture
DY
uitgae
_SetSoundWindow@4
_WaveRelease@4
_DxSoundCleanup@0
_LoadWave@8
uitgui.sdl
_UitGUI_OnLButtonUp@12
_UitGUI_OnLButtonDown@12
_UitGUI_OnChar@12
_UitGUI_OnInputLangChange@4
_UitGUI_OnKeyDown@12
_UitGUI_OnMouseMove@12
_UitGUI_OnKillFocus@4
_UitGUI_OnSetFocus@4
_UitGUI_Release@4
??3UitGUI@@SGXPAX@Z
_UitGUI_KeyinFocusNext@8
_UitGUI_DefaultButtonSound_OnLButtonDown@8
_UitGUI_TypeEnable@12
_UitGUI_SetDefault@16
??0uAnimate@@QAE@PAVuezAnimateEx@@HHPAUIDirectDrawSurface@@@Z
_UitGUI_OnMouseWhell@12
?SetAnimate@uButton@@QAGXPAVuezAnimateEx@@00K@Z
??0uButton@@QAE@HHHHPAVtag_gge_Picture@@@Z
??2UitGUI@@SGPAXI@Z
_UitGUI_Control@4
_UitGUI_TimeCount@12
_UitGUI_DefaultButtonSound_OnMouseMove@8
GUIDisplaySurface
_UitGUI_Refresh@8
_UitGUI_SetUpdateRect@8
?SetPicture@uPicture@@QAGXPAVtag_gge_Picture@@@Z
?SetStatus@uButton@@QAGXK@Z
??0uPicture@@QAE@HHPAVtag_gge_Picture@@@Z
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ