Static task
static1
Behavioral task
behavioral1
Sample
732074e09d0f56d89348b65a48dc7e51_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
732074e09d0f56d89348b65a48dc7e51_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
732074e09d0f56d89348b65a48dc7e51_JaffaCakes118
-
Size
181KB
-
MD5
732074e09d0f56d89348b65a48dc7e51
-
SHA1
9dab337383fbdd0b8e70f1f4b819a5a5ddbec53e
-
SHA256
25e4838f9e73590978d6a40292014fa34976e1bae318b1868049dade8823304c
-
SHA512
8540aea6e70742d0a70c61baec1653a72bd20d955afdb449a5ce47002fd3613a7319225be6003e540ab0b30dc2326f1b2ec104a68b9e33e88d596e3772c7319d
-
SSDEEP
3072:Xbd2CVbKiN7WYjwkhP33icsO9n9hE3jJ5Nm4e4DnnwZJaIGv44u49:XbdpVmifn3Lr9hit5N84DnwPaIydh9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 732074e09d0f56d89348b65a48dc7e51_JaffaCakes118
Files
-
732074e09d0f56d89348b65a48dc7e51_JaffaCakes118.exe windows:4 windows x86 arch:x86
90116c2a809f2fdaba85fd443ba74da1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowPlacement
MapWindowPoints
CharUpperW
SetForegroundWindow
RegisterWindowMessageW
GetClassInfoW
GetPropW
GetNextDlgTabItem
InvalidateRect
SendDlgItemMessageA
AdjustWindowRectEx
SetActiveWindow
CreateWindowExW
GetMessageTime
SetRect
GetTopWindow
GetClassInfoExW
CharNextW
GetClassLongW
GetForegroundWindow
GetClientRect
CopyAcceleratorTableW
DefWindowProcW
MessageBeep
GetMessagePos
IsIconic
OffsetRect
UpdateWindow
GetNextDlgGroupItem
IsChild
InvalidateRgn
IsRectEmpty
RemovePropW
EqualRect
IntersectRect
IsWindow
SetPropW
LoadIconW
GetMenu
WinHelpW
RegisterClassW
CallWindowProcW
DestroyMenu
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
shlwapi
PathFindExtensionW
PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
PathIsUNCW
PathStripToRootW
PathAppendW
comdlg32
GetFileTitleW
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
advapi32
RegEnumKeyW
RegQueryValueW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExW
kernel32
GetModuleHandleW
DeleteFileW
FindNextFileW
GetCalendarInfoW
LocalFileTimeToFileTime
CreateMutexW
WriteFile
LockResource
GetFileAttributesW
GetProcAddress
WideCharToMultiByte
WaitForSingleObject
LoadLibraryW
FreeLibrary
GetCurrentProcessId
InterlockedExchange
GetLocaleInfoA
GetThreadContext
ReadFile
FindClose
CreateDirectoryW
MultiByteToWideChar
InitializeCriticalSection
EnumResourceNamesA
GetSystemDefaultLangID
lstrcmpiA
VirtualFree
GetCurrentDirectoryW
CreateFileW
GetThreadLocale
lstrcpyW
SetFileTime
EnumResourceLanguagesW
FindFirstFileW
GetLocaleInfoW
ExitProcess
InterlockedDecrement
ConvertDefaultLocale
GetACP
GetModuleFileNameW
FindResourceW
SystemTimeToFileTime
ReleaseMutex
SetFilePointer
GetVersionExW
DeleteCriticalSection
RaiseException
LoadResource
CloseHandle
MoveFileW
SizeofResource
RemoveDirectoryW
GetVersion
lstrcmpA
oledlg
OleUIBusyW
gdi32
TextOutW
ExtTextOutW
RestoreDC
GetClipBox
Escape
SelectObject
SetBkColor
SetViewportOrgEx
OffsetViewportOrgEx
ExtSelectClipRgn
ScaleWindowExtEx
SetMapMode
GetDeviceCaps
SetTextColor
ScaleViewportExtEx
DeleteObject
GetTextColor
DeleteDC
GetStockObject
SetViewportExtEx
GetMapMode
GetObjectW
SaveDC
GetWindowExtEx
PtVisible
RectVisible
GetViewportExtEx
GetRgnBox
CreateBitmap
GetBkColor
SetWindowExtEx
CreateRectRgnIndirect
ole32
OleIsCurrentClipboard
CoGetClassObject
CoUninitialize
CoTaskMemAlloc
OleFlushClipboard
CreateILockBytesOnHGlobal
CoTaskMemFree
CoFreeUnusedLibraries
CoCreateInstance
CoRevokeClassObject
CoInitialize
StgCreateDocfileOnILockBytes
CLSIDFromProgID
StgOpenStorageOnILockBytes
OleUninitialize
CoRegisterMessageFilter
OleInitialize
CLSIDFromString
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ