Static task
static1
Behavioral task
behavioral1
Sample
70c1c24d5e1e336401b9805e42b95aed_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
70c1c24d5e1e336401b9805e42b95aed_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
70c1c24d5e1e336401b9805e42b95aed_JaffaCakes118
-
Size
128KB
-
MD5
70c1c24d5e1e336401b9805e42b95aed
-
SHA1
8b7e3890b51ff27e1d0b1ea7068723844fa34272
-
SHA256
165225594eeecab25062e49129d5a502c9cf41fbaadf95716b3950eb9c98f0f8
-
SHA512
d75a00a73e063e9ef6cf838445b0d93b0e3dca9e86ef4a06c2ff51a12bf45d56384f162e62b3ae8ab4bba4295fc93a4dfaf354e4c73cb9fe20a3f57ec1b3913f
-
SSDEEP
3072:gZaHPPTWBVCohjKSSDrqMpgRKWb27bUSzJrzYD:gIHXKTCoNv96MXq8I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70c1c24d5e1e336401b9805e42b95aed_JaffaCakes118
Files
-
70c1c24d5e1e336401b9805e42b95aed_JaffaCakes118.exe windows:4 windows x86 arch:x86
d7f19bab3b3418f3f237701b815e3763
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetA
CreatePropertySheetPageA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
winmm
timeGetTime
msimg32
AlphaBlend
kernel32
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
TerminateProcess
GetOEMCP
GetACP
GetStringTypeW
MultiByteToWideChar
GetFileType
ExitProcess
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetCPInfo
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
HeapAlloc
HeapFree
VirtualProtect
GetSystemInfo
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
RtlUnwind
InterlockedExchange
SetErrorMode
UnmapViewOfFile
LoadResource
SizeofResource
LockResource
FreeResource
FindFirstFileA
CreateFileA
CreateFileMappingA
MapViewOfFile
CloseHandle
ReadFile
FindResourceA
FindResourceExA
GetCurrentThreadId
CreateProcessA
Sleep
FreeLibrary
GetLastError
GetVersionExA
GetCurrentProcess
GetSystemDirectoryA
LoadLibraryA
GetPrivateProfileStringA
lstrcatA
GetWindowsDirectoryA
SetThreadLocale
GetSystemDefaultLCID
GetLocaleInfoA
GetModuleHandleA
GetProcAddress
GetCommandLineA
lstrcpyA
GetModuleFileNameA
lstrcmpiA
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcpynA
GetLocaleInfoW
HeapSize
SetFilePointer
SetStdHandle
FlushFileBuffers
GetStringTypeA
user32
SetFocus
PostQuitMessage
SetTimer
GetForegroundWindow
GetAsyncKeyState
LoadMenuA
GetSubMenu
EnableMenuItem
GetWindowThreadProcessId
AttachThreadInput
TrackPopupMenu
DestroyMenu
ModifyMenuA
DeleteMenu
DialogBoxParamA
RemovePropA
SetPropA
GetPropA
UpdateWindow
CreatePopupMenu
CheckMenuItem
InsertMenuItemA
GetWindow
MoveWindow
ExitWindowsEx
EnumWindows
EnumDisplaySettingsExA
ChangeDisplaySettingsA
EnumDisplaySettingsA
ShowWindow
GetSystemMetrics
WinHelpA
MessageBoxA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
LoadIconA
FindWindowA
GetWindowTextA
SetWindowTextA
SetWindowPos
CharPrevA
BeginDeferWindowPos
EnumChildWindows
EndDeferWindowPos
InvalidateRect
GetClassNameA
GetWindowRect
GetSystemMenu
SetWindowLongA
DrawIconEx
DrawStateA
DestroyIcon
SetMenuItemInfoA
GetMenuItemCount
GetMenuItemInfoA
CheckMenuRadioItem
InsertMenuA
DrawIcon
MessageBeep
LoadImageA
DrawEdge
OffsetRect
DrawTextA
SystemParametersInfoA
CharNextA
GetDlgItem
CheckDlgButton
EnableWindow
CheckRadioButton
PostMessageA
GetDlgItemInt
SendDlgItemMessageA
EndDialog
SetDlgItemTextA
FillRect
IsDlgButtonChecked
wsprintfA
LoadCursorA
RegisterClassA
DefWindowProcA
GetCursorPos
PtInRect
SetCursor
ReleaseCapture
SetCapture
KillTimer
GetSysColor
IsWindowEnabled
IsWindowVisible
GetDC
GetWindowLongA
GetClientRect
GetUpdateRect
BeginPaint
EndPaint
SendMessageA
CopyRect
GetParent
MapWindowPoints
CopyImage
GetWindowDC
ReleaseDC
DeferWindowPos
GetDesktopWindow
SetForegroundWindow
gdi32
GetStockObject
SetBkMode
CreateFontIndirectA
CreateSolidBrush
MoveToEx
LineTo
Ellipse
CreatePen
GetObjectA
GetCurrentObject
GetTextExtentPoint32A
GetTextMetricsA
GetDeviceCaps
CreateDCA
CreateBitmap
SetTextColor
SetStretchBltMode
GetPixel
PatBlt
CreatePatternBrush
ExtSelectClipRgn
Polygon
CreateRectRgn
GetTextColor
SelectClipRgn
GetPaletteEntries
ExtEscape
CreateDIBSection
ExtTextOutA
Rectangle
StretchBlt
UpdateColors
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
BitBlt
DeleteObject
SelectPalette
RealizePalette
CreateDIBitmap
SetBkColor
CreatePalette
advapi32
RegQueryValueExA
RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
GetUserNameA
RegCloseKey
shell32
FindExecutableA
Shell_NotifyIconA
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.prdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE