Static task
static1
Behavioral task
behavioral1
Sample
75cc3f487fb56cf21e2c10d202cde94d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
75cc3f487fb56cf21e2c10d202cde94d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
75cc3f487fb56cf21e2c10d202cde94d_JaffaCakes118
-
Size
450KB
-
MD5
75cc3f487fb56cf21e2c10d202cde94d
-
SHA1
e2f61ed15a119195f70df52e7fddf20b6ac3c190
-
SHA256
1999057e952d840efed803513a0ac232976d15b63b0565fbc6110d5665b19c9e
-
SHA512
7187f46d9fb80d7beeda9f6b50dcac400e7f66e14d23f97a4bff72918f3367622092887a62535c22aa0449b82bdee05b8f42856e113c8694987f52d12675a892
-
SSDEEP
6144:RI/c0wufbnEtB27BLm9LbR24pDshgVM1qskdwxlZ///HwzlSsQLH5Aao:G/nNbnEtB2xMbDshgVqd9lKJSsPao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75cc3f487fb56cf21e2c10d202cde94d_JaffaCakes118
Files
-
75cc3f487fb56cf21e2c10d202cde94d_JaffaCakes118.exe windows:4 windows x86 arch:x86
9201552352d858917aaaa6eb5d8a5bd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetA
PropertySheetW
InitCommonControlsEx
CreateToolbarEx
CreateStatusWindowW
ord17
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
comdlg32
GetOpenFileNameA
GetOpenFileNameW
mpr
WNetAddConnection2W
WNetOpenEnumA
WNetOpenEnumW
WNetCloseEnum
WNetEnumResourceA
WNetEnumResourceW
WNetGetResourceParentA
WNetGetResourceParentW
WNetGetResourceInformationA
WNetGetResourceInformationW
WNetAddConnection2A
gdi32
DeleteObject
oleaut32
VariantCopy
VariantClear
SysAllocString
SysFreeString
SysAllocStringByteLen
SysStringByteLen
ole32
OleUninitialize
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
CoInitialize
ReleaseStgMedium
RegisterDragDrop
RevokeDragDrop
CoUninitialize
DoDragDrop
user32
GetWindowTextLengthW
GetDialogBaseUnits
SystemParametersInfoA
DialogBoxParamA
GetWindowTextW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextW
SetWindowTextA
CreateWindowExW
RegisterClassW
RegisterClassA
SendMessageW
LoadStringW
LoadStringA
AppendMenuW
AppendMenuA
InsertMenuItemA
InsertMenuItemW
SetMenuItemInfoA
SetMenuItemInfoW
GetMenuItemInfoA
GetMenuItemInfoW
CharPrevA
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CharLowerW
CharLowerA
CharUpperW
CharUpperA
KillTimer
SetCursor
wsprintfA
SetDlgItemTextA
MapDialogRect
ClientToScreen
GetMenuItemCount
TrackPopupMenuEx
GetCursorPos
ScreenToClient
IsWindowEnabled
ChildWindowFromPointEx
WindowFromPoint
RegisterClipboardFormatA
PostMessageA
SetWindowLongW
InvalidateRect
UpdateWindow
SetTimer
MapVirtualKeyA
CallWindowProcW
CallWindowProcA
GetKeyState
EnableMenuItem
RemoveMenu
CheckMenuRadioItem
CheckMenuItem
GetMenu
LoadMenuA
SetMenu
DrawMenuBar
CreatePopupMenu
GetSubMenu
DestroyMenu
GetParent
IsDlgButtonChecked
CheckDlgButton
CheckRadioButton
GetDlgItem
GetWindowRect
MoveWindow
IsZoomed
GetClientRect
MessageBoxW
ReleaseCapture
SetCapture
GetCapture
DefWindowProcW
DefWindowProcA
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
DispatchMessageA
LoadIconA
LoadCursorA
GetWindowPlacement
SetWindowPlacement
PostQuitMessage
EndDialog
EnableWindow
ShowWindow
LoadBitmapA
CreateWindowExA
DestroyWindow
GetWindowLongA
SetWindowLongA
SetFocus
SendMessageA
DialogBoxParamW
GetClassInfoA
GetClassInfoW
advapi32
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegSetValueExW
RegQueryValueExA
RegQueryValueExW
GetUserNameW
RegCreateKeyExA
shell32
SHGetSpecialFolderLocation
SHGetMalloc
SHFileOperationA
ShellExecuteA
ShellExecuteExA
SHGetFileInfoA
SHChangeNotify
DragFinish
DragQueryFileA
SHGetPathFromIDListA
DragQueryFileW
SHBrowseForFolderA
SHGetDesktopFolder
msvcrt
memcmp
__setusermatherr
_initterm
__getmainargs
_acmdln
_controlfp
__set_app_type
__p__fmode
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_beginthreadex
strlen
wcsncmp
rand
srand
__p__commode
free
malloc
__CxxFrameHandler
_CxxThrowException
_adjust_fdiv
_purecall
memset
memmove
memcpy
_wcsicmp
wcslen
kernel32
EnterCriticalSection
GetStartupInfoA
InitializeCriticalSection
SetEvent
VirtualFree
VirtualAlloc
CreateEventA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetStdHandle
HeapAlloc
GetProcessHeap
HeapFree
GetDiskFreeSpaceA
GetVolumeInformationW
GetVolumeInformationA
GetSystemTime
SystemTimeToFileTime
FileTimeToDosDateTime
FileTimeToSystemTime
CreateProcessA
CreateProcessW
SetEndOfFile
WriteFile
ReadFile
DeviceIoControl
SetFilePointer
GetFileSize
CreateFileA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindCloseChangeNotification
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindClose
GetTempFileNameW
GetTempFileNameA
GetTempPathW
GetTempPathA
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
DeleteFileW
DeleteFileA
CreateDirectoryW
CreateDirectoryA
MoveFileW
RemoveDirectoryW
SetFileAttributesW
MoveFileA
RemoveDirectoryA
SetFileAttributesA
SetLastError
CreateFileW
SetFileTime
GetWindowsDirectoryW
GetWindowsDirectoryA
FormatMessageW
FormatMessageA
LocalFree
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryW
LoadLibraryExW
LoadLibraryExA
WideCharToMultiByte
MultiByteToWideChar
GetDriveTypeA
GetCurrentProcess
SetPriorityClass
lstrcatA
lstrlenA
GetTickCount
FileTimeToLocalFileTime
WaitForMultipleObjects
Sleep
CloseHandle
CompareFileTime
GlobalAlloc
GlobalFree
GlobalSize
GlobalLock
GlobalUnlock
GetSystemDefaultLangID
GetUserDefaultLangID
AreFileApisANSI
GetModuleHandleW
CopyFileW
GetModuleHandleA
CopyFileA
WaitForSingleObject
FindNextChangeNotification
GetCompressedFileSizeW
LoadLibraryA
FreeLibrary
GetCommandLineW
GetVersionExA
GetProcAddress
DeleteCriticalSection
GetLastError
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
Sections
.text Size: 292KB - Virtual size: 292KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ