Static task
static1
Behavioral task
behavioral1
Sample
68b429eed4e62edd0a3c23a9f7e4970e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
68b429eed4e62edd0a3c23a9f7e4970e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
68b429eed4e62edd0a3c23a9f7e4970e_JaffaCakes118
-
Size
196KB
-
MD5
68b429eed4e62edd0a3c23a9f7e4970e
-
SHA1
8be18dddec168c6266dd1012a68fad1eb4131aff
-
SHA256
402d5429f9d358e41b01ff89881e49ce4aa492e396d5c4b8c95f578ef6545064
-
SHA512
9c6c43175e788add33c7f4f20c965eb1c6f06dc9505ef94ef7b4ad6a84e0ed65bb9736f84eab3321e9b0f669959cb6f001675767ff920627dd5b7ee338d9d47d
-
SSDEEP
3072:Ulp+WpH4rq7wmFeMTB9hSOTpIJPbTCYrnlCIEqST7i:MdGq7wQeM4PvCocQS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68b429eed4e62edd0a3c23a9f7e4970e_JaffaCakes118
Files
-
68b429eed4e62edd0a3c23a9f7e4970e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fde458c9c72b183671502bc07eb26461
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
GetDriveTypeA
GetFileType
SetStdHandle
TerminateProcess
CreateThread
ExitThread
HeapReAlloc
HeapSize
GetACP
GetTimeZoneInformation
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FileTimeToLocalFileTime
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetProfileStringA
GetFileTime
GetFileSize
SizeofResource
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetFullPathNameA
GetVolumeInformationA
UnlockFile
LockFile
WriteFile
ReadFile
CreateFileA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageA
LocalFree
LocalAlloc
EnterCriticalSection
lstrcpynA
MulDiv
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
lstrlenA
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
SetLastError
FreeLibrary
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
SuspendThread
SetThreadPriority
ResumeThread
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetStdHandle
FindClose
GetFileAttributesA
FindFirstFileA
GetCurrentDirectoryA
LoadLibraryA
GetProcAddress
CreateMutexA
GetLastError
CloseHandle
Sleep
SetEvent
WaitForSingleObject
CreateEventA
GetCurrentProcess
DuplicateHandle
GetEnvironmentStrings
user32
CopyRect
ScreenToClient
AdjustWindowRectEx
GetSysColor
MapWindowPoints
UpdateWindow
ReleaseDC
GetDC
LoadStringA
DestroyMenu
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
InflateRect
InvalidateRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgCtrlID
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
LoadIconA
SendMessageA
AppendMenuA
UnregisterClassA
HideCaret
ShowCaret
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
CallWindowProcA
PostQuitMessage
PostMessageA
PostThreadMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
IsWindowUnicode
GetSystemMenu
DrawIcon
wsprintfA
gdi32
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
SetMapMode
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
PatBlt
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateBitmap
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
shell32
ShellExecuteA
comctl32
ord17
wsock32
WSAStartup
WSACleanup
wininet
InternetGetLastResponseInfoA
HttpQueryInfoA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
Sections
.text Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ