Static task
static1
Behavioral task
behavioral1
Sample
67aff297f27a80242018988aa35b4811_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67aff297f27a80242018988aa35b4811_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
67aff297f27a80242018988aa35b4811_JaffaCakes118
-
Size
1.2MB
-
MD5
67aff297f27a80242018988aa35b4811
-
SHA1
8a17244f53828a6bb3f3cde876e0ba077b2e5220
-
SHA256
9801c8b2adccd3ed03530db08be1ba7e2e86062fdd6af23a8ab7d4434c94c274
-
SHA512
8c80eb0aa599addcc69b24a1dce898ed92381a752ce3fad3ff7459c19d9e8f690c1ae91aef5ca13f1fa7a8952ed0c7b05a0086c14ca185afa82bd3de7f0af109
-
SSDEEP
12288:aKwLpJ2iUvjZH9TIROyE2UrJ4JSdZcJgldaUmR509+Hb913A/:qLBUV4MJ4JSHcmdaUs2+55A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67aff297f27a80242018988aa35b4811_JaffaCakes118
Files
-
67aff297f27a80242018988aa35b4811_JaffaCakes118.exe windows:4 windows x86 arch:x86
6415271be83593c202ebe8d99f070c27
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmSetConversionStatus
ImmGetContext
kernel32
GetModuleHandleW
GetLastError
CreateEventW
CloseHandle
CreateThread
MultiByteToWideChar
GetModuleFileNameW
CompareStringA
SetEndOfFile
GetDriveTypeA
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
LoadLibraryA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetConsoleMode
CreateFileA
CompareStringW
GetConsoleCP
GetCurrentDirectoryA
QueryPerformanceFrequency
QueryPerformanceCounter
GetProcAddress
FreeLibrary
LoadLibraryW
CreateDirectoryW
DeleteFileW
WideCharToMultiByte
FindNextFileW
LocalFree
FindFirstFileW
FindClose
GetVersionExW
GetCommandLineW
CreateFileMappingW
OpenFileMappingW
CreateFileW
MapViewOfFile
UnmapViewOfFile
InterlockedIncrement
InterlockedCompareExchange
MoveFileExW
RemoveDirectoryW
WaitForSingleObject
GetCurrentThreadId
ReleaseMutex
CreateMutexW
OpenMutexW
GetFileSize
SetFilePointer
WriteFile
ReadFile
FlushFileBuffers
SetLastError
LCMapStringW
GetTickCount
Sleep
CreateProcessW
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetVersionExA
GetProcessHeap
GetStartupInfoW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
RtlUnwind
HeapReAlloc
GetTimeZoneInformation
RaiseException
LCMapStringA
GetCPInfo
GetStringTypeA
GetStringTypeW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetStdHandle
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
ExitProcess
GetACP
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
GetCurrentProcessId
GetFullPathNameW
user32
GetClassNameW
ReleaseCapture
GetCursorPos
GetWindowLongW
OffsetRect
GetWindowRect
SendMessageW
MoveWindow
SetWindowLongW
SetWindowTextW
GetDlgCtrlID
RedrawWindow
ShowWindow
SetCapture
SetCursorPos
ActivateKeyboardLayout
GetSystemMetrics
PtInRect
BeginPaint
SetRect
DefWindowProcW
GetCursor
GetMonitorInfoW
SetWindowRgn
UpdateLayeredWindow
RegisterClassExW
FillRect
MonitorFromPoint
DestroyWindow
EndPaint
SubtractRect
KillTimer
InflateRect
CreateDialogParamW
DialogBoxParamW
TrackMouseEvent
GetParent
CallWindowProcW
GetDlgItem
LoadBitmapW
GetKeyboardLayoutList
SetForegroundWindow
IsIconic
CreateWindowExW
SetClassLongW
SetCursor
LoadCursorW
GetDlgItemTextW
EnableWindow
IsWindowEnabled
PostMessageW
ReleaseDC
DrawTextW
CheckDlgButton
GetDC
MessageBoxW
IntersectRect
EndDialog
FindWindowW
SetWindowPos
IsDlgButtonChecked
SetTimer
SetFocus
SetDlgItemTextW
GetWindowTextW
gdi32
GetStockObject
CreateCompatibleDC
DeleteDC
CreateSolidBrush
GetTextExtentPoint32W
GetObjectW
SelectObject
SetBkMode
StretchBlt
CreatePen
GetTextExtentPointW
Rectangle
CreateFontIndirectW
DeleteObject
CreateCompatibleBitmap
GetPixel
BitBlt
CreateDIBSection
SetTextColor
shell32
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
wininet
InternetOpenUrlW
InternetCloseHandle
InternetReadFile
InternetConnectW
HttpSendRequestW
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
HttpOpenRequestW
InternetQueryOptionW
InternetCanonicalizeUrlW
comctl32
InitCommonControlsEx
msimg32
TransparentBlt
advapi32
RegQueryValueExW
SetSecurityInfo
SetEntriesInAclW
GetSecurityDescriptorSacl
BuildExplicitAccessWithNameW
SetNamedSecurityInfoW
GetSecurityInfo
GetNamedSecurityInfoW
RegOpenKeyExW
RegCloseKey
RegQueryValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
Sections
.text Size: 304KB - Virtual size: 301KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 668KB - Virtual size: 665KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ