Static task
static1
Behavioral task
behavioral1
Sample
72771fd8263d43950d4d50af22079755_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72771fd8263d43950d4d50af22079755_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72771fd8263d43950d4d50af22079755_JaffaCakes118
-
Size
183KB
-
MD5
72771fd8263d43950d4d50af22079755
-
SHA1
63c6c462b9b7d49054aa17d99dee527ecf08fba8
-
SHA256
e01af8b46ee296659413358a0921ce44e6a572780539e8b8f5a5d7f244dae777
-
SHA512
9b05cc1ea4e3be057316dec09725b47c4df122717be8a595d3d4c6867bb317888211029ce1d30cc104d0ed6406ab12160896127a028bfe836504605a1b7862e3
-
SSDEEP
3072:tz/yvyM9hUQppdty9zo2XBrL+2cQhwj8RIAWU7g+FLIE5ZYIjuX0IfOorSYkD:IKPc0O2XpC2Lwj8I/+9IE5anXXZrSY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72771fd8263d43950d4d50af22079755_JaffaCakes118
Files
-
72771fd8263d43950d4d50af22079755_JaffaCakes118.exe windows:4 windows x86 arch:x86
3cb9b4c32a8eb47ada6831543c9e93aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
sqrt
wcsncmp
memcpy
tolower
log10
wcstol
acos
comdlg32
ChooseColorA
FindTextA
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA
user32
IsWindowEnabled
GetForegroundWindow
GetDCEx
GetPropA
DeferWindowPos
GetLastActivePopup
DefFrameProcA
GetFocus
DrawFrameControl
GetSysColor
FrameRect
EnableScrollBar
GetDlgItem
EndPaint
DefWindowProcA
EndDeferWindowPos
SetCursor
EqualRect
CharNextA
ShowScrollBar
EnableMenuItem
EnableWindow
CharLowerBuffA
GetActiveWindow
FindWindowA
GetMenuStringA
GetScrollPos
GetCapture
GetKeyNameTextA
GetMenuItemID
GetMessagePos
GetClipboardData
ShowWindow
SetWindowLongA
GetScrollInfo
TrackPopupMenu
GetParent
GetMenuItemCount
GetClientRect
DispatchMessageA
SetTimer
EnumThreadWindows
CharToOemA
SetWindowTextA
DefMDIChildProcA
CreateIcon
CheckMenuItem
BeginDeferWindowPos
GetSubMenu
GetWindow
EnumWindows
DispatchMessageW
GetClassInfoA
IsWindowVisible
CallWindowProcA
DrawMenuBar
IsChild
CreatePopupMenu
GetScrollRange
GetCursorPos
GetClassLongA
CreateWindowExA
IsMenu
MessageBoxA
DrawIconEx
ClientToScreen
CallNextHookEx
GetDesktopWindow
HideCaret
GetDC
kernel32
CreateEventA
GetDateFormatA
CreateThread
GetSystemDefaultLangID
lstrlenA
GlobalFindAtomA
MulDiv
lstrcpyA
GetFileAttributesA
LoadLibraryA
HeapAlloc
VirtualAlloc
GetVersionExA
ResetEvent
GetCurrentThread
VirtualQuery
GetCurrentProcessId
MoveFileA
CloseHandle
GetCPInfo
GlobalDeleteAtom
GetEnvironmentStrings
GetStdHandle
GetCommandLineA
DeleteCriticalSection
GetOEMCP
ExitThread
VirtualAllocEx
HeapDestroy
GetModuleHandleA
CompareStringA
GetUserDefaultLCID
SetEndOfFile
FreeResource
GetVersion
WideCharToMultiByte
FindClose
ExitProcess
VirtualFree
ReadFile
CreateFileA
GetCurrentProcess
GetLocaleInfoA
GlobalAlloc
SizeofResource
LoadLibraryExA
lstrcpynA
GetCurrentThreadId
LocalAlloc
GetDiskFreeSpaceA
GetLastError
EnterCriticalSection
GetModuleFileNameA
lstrcatA
WaitForSingleObject
EnumCalendarInfoA
GetACP
GlobalAddAtomA
DeleteFileA
GetStringTypeA
RaiseException
GetStartupInfoA
GetFileSize
GetFileType
Sections
CODE Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ