Static task
static1
Behavioral task
behavioral1
Sample
7446c71474316a6e56b9d88123369de5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
7446c71474316a6e56b9d88123369de5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7446c71474316a6e56b9d88123369de5_JaffaCakes118
-
Size
225KB
-
MD5
7446c71474316a6e56b9d88123369de5
-
SHA1
25cb832a8c9a5783576ccb594bbac6b15027f175
-
SHA256
47ade10a4690a237c6b664a33f50df3472136fa7753c64a3823ed00a17bd1754
-
SHA512
fffa02e64aaffb349d54b6a0f5d72685e3916e6675c16d71472f5fb4c10baeda0ab094cbcb46766f4afea14a0c1603e4df8d3ce6ec2596e1def9e3fd8f3b2761
-
SSDEEP
6144:t1Wj/zJbbZ4NcmCREjXPuF3Pl4kfFQF8c9H:Sj/zJbCNV0E7q3Pl4B9H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7446c71474316a6e56b9d88123369de5_JaffaCakes118
Files
-
7446c71474316a6e56b9d88123369de5_JaffaCakes118.exe windows:4 windows x86 arch:x86
41f89feb93467fd873dd49f022f69de0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mapi32
ord11
ord17
ord13
ord23
ord21
kernel32
GetModuleFileNameA
GetFullPathNameA
GetVolumeInformationA
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
ExitProcess
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
RtlUnwind
FindFirstFileA
FreeEnvironmentStringsA
GetEnvironmentStrings
FindClose
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
HeapCreate
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LoadLibraryA
GetProcAddress
FreeLibrary
GetProfileIntA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
WritePrivateProfileStringA
GetProcessVersion
SetLastError
LocalReAlloc
TlsSetValue
TlsGetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
InterlockedDecrement
CreateEventA
WaitForSingleObject
SetEvent
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
lstrcpynA
GlobalGetAtomNameA
GlobalAddAtomA
LockResource
FindResourceA
WriteProfileStringA
LoadResource
GlobalUnlock
GlobalFree
GetProfileStringA
GlobalAlloc
GlobalLock
MultiByteToWideChar
SystemTimeToFileTime
WideCharToMultiByte
FileTimeToSystemTime
CreateFileA
GetFileSize
GetLastError
ReadFile
CloseHandle
lstrcmpA
lstrcmpiA
GetVersion
LocalAlloc
SetErrorMode
LocalFree
lstrlenW
lstrlenA
MulDiv
lstrcpyA
lstrcatA
UnhandledExceptionFilter
FreeEnvironmentStringsW
advapi32
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
user32
RemovePropA
GetPropA
SetForegroundWindow
CallWindowProcA
SetPropA
GetMessageTime
GetForegroundWindow
CreateWindowExA
DefWindowProcA
GetWindowTextA
UnhookWindowsHookEx
RegisterClassA
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
GetScrollInfo
ScreenToClient
EndDeferWindowPos
BeginDeferWindowPos
GetClientRect
DeferWindowPos
AdjustWindowRectEx
GetSysColor
MapWindowPoints
SystemParametersInfoA
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
IsDlgButtonChecked
SetWindowTextA
CharUpperA
SendDlgItemMessageA
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
ClientToScreen
LoadCursorA
LoadStringA
GetMenuState
ModifyMenuA
RegisterWindowMessageA
ReleaseDC
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
ValidateRect
GetCursorPos
SetMessageQueue
SetWindowsHookExA
MessageBoxA
ShowOwnedPopups
PostQuitMessage
GetLastActivePopup
BringWindowToTop
IsWindowVisible
IsIconic
EqualRect
CopyRect
SetWindowLongA
InvalidateRect
GetDlgItem
GetKeyState
GetDlgCtrlID
GetSubMenu
GetMenuItemCount
GetMenuItemID
UnpackDDElParam
WinHelpA
SetMenu
LoadIconA
GetMessagePos
DestroyMenu
SetFocus
GetWindowLongA
ShowWindow
GetDesktopWindow
GetWindow
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
PostMessageA
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GetNextDlgTabItem
EndDialog
IsWindowEnabled
GetActiveWindow
SetActiveWindow
IsWindow
GetSystemMetrics
CreateDialogIndirectParamA
GetParent
DrawFocusRect
GetWindowRect
GetDC
ShowScrollBar
LoadBitmapA
GetSystemMenu
DestroyWindow
EnableWindow
SendMessageA
wsprintfA
GetMenu
EnableMenuItem
IsDialogMessageA
SetRect
UpdateWindow
SetWindowPos
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
LoadMenuA
GetClassInfoA
ReuseDDElParam
UnregisterClassA
gdi32
CreateCompatibleDC
BitBlt
CreateBitmap
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteObject
CreatePen
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
TextOutW
PatBlt
GetTextMetricsA
GetDeviceCaps
CreateFontIndirectA
GetStockObject
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
comctl32
ord17
shell32
DragQueryFileA
DragFinish
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE