Static task
static1
Behavioral task
behavioral1
Sample
66dab58f0f155608107af68c0c2a2d36_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
66dab58f0f155608107af68c0c2a2d36_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
66dab58f0f155608107af68c0c2a2d36_JaffaCakes118
-
Size
254KB
-
MD5
66dab58f0f155608107af68c0c2a2d36
-
SHA1
5ead8837f0ee13c192de70b59e7ea42f6be6503c
-
SHA256
1405fffb29a050c98c5c482f722a019f7227ed07138503cd8692fb7b17dfe8b5
-
SHA512
a5fe5f17eac475fcedd2914f00a584c30c5d8efb47c850a994077858f8ea24a38c25320649537960f571e3fce3df954171ba5b9bda97cced97881783bd6a1436
-
SSDEEP
3072:BCgHKaSqkrH/HHQwfDalTZAQ4qYLR2475/CgLypJp39LYvfVBSxmCQqu9R5ulzp:sIyrH46aTAQ4qYN24t/ZcJP0ASqlN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66dab58f0f155608107af68c0c2a2d36_JaffaCakes118
Files
-
66dab58f0f155608107af68c0c2a2d36_JaffaCakes118.exe windows:5 windows x86 arch:x86
37903f00054ce3d46846dd646453e637
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageEncodersSize
GdiplusShutdown
GdiplusStartup
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipDisposeImage
GdipAlloc
GdipGetImageEncoders
GdipFree
wininet
InternetCloseHandle
FtpPutFileA
InternetConnectA
InternetOpenA
kernel32
GetTickCount
UnmapViewOfFile
GetLocalTime
SystemTimeToFileTime
WriteFile
CreateFileA
CreateFileMappingA
MapViewOfFile
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
GetLastError
GetCurrentProcessId
SetThreadPriority
ResumeThread
GetCurrentThreadId
WaitForSingleObject
SetEvent
SuspendThread
CreateEventA
CompareStringA
GetModuleHandleW
GetModuleHandleA
CloseHandle
InterlockedDecrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalGetAtomNameA
lstrcmpA
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
MoveFileA
DeleteFileA
FlushFileBuffers
SetEndOfFile
GetCurrentProcess
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetStartupInfoA
VirtualAlloc
HeapReAlloc
ExitThread
CreateThread
HeapSize
ExitProcess
GetTimeZoneInformation
GetACP
IsValidCodePage
HeapCreate
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetProcessHeap
GetFileInformationByHandle
GetFileSize
SetFilePointer
ReadFile
FileTimeToSystemTime
WaitForMultipleObjects
GetModuleFileNameA
CopyFileA
LoadLibraryA
GetProcAddress
FreeLibrary
SetFileAttributesA
MultiByteToWideChar
GetComputerNameA
Sleep
GetFileAttributesA
WideCharToMultiByte
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
InterlockedIncrement
CreateFileW
user32
IsWindow
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetCapture
WinHelpA
RegisterWindowMessageA
SetWindowTextA
ClientToScreen
DestroyMenu
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
PostQuitMessage
GetDlgItem
SetForegroundWindow
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
GetMenuState
GetMenuItemID
GetSubMenu
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
GetDesktopWindow
LoadIconA
GetAsyncKeyState
GetGUIThreadInfo
GetWindowThreadProcessId
GetKeyboardLayout
GetForegroundWindow
GetWindowTextLengthA
GetWindowTextA
EnableWindow
ShowWindow
GetClientRect
GetMenuItemCount
gdi32
SetMapMode
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
ExtTextOutA
SetBkColor
DeleteObject
RestoreDC
BitBlt
SelectObject
SaveDC
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
CreateDCA
SetTextColor
GetClipBox
CreateBitmap
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
oleacc
LresultFromObject
CreateStdAccessibleObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ