Static task
static1
Behavioral task
behavioral1
Sample
7508b0896cf64bacf0d975f5df72d476_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7508b0896cf64bacf0d975f5df72d476_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7508b0896cf64bacf0d975f5df72d476_JaffaCakes118
-
Size
96KB
-
MD5
7508b0896cf64bacf0d975f5df72d476
-
SHA1
7023221bc9c5e523706efcd78e2f018f25208ff4
-
SHA256
b0e553a45d234df11acf1aa613795635f5531410c9d04ea2520a2e359738f48a
-
SHA512
83057c8a49905d270ddef434875e3e66d5d55a447f442a17fd1b366094f79ba17a94e4cf18f8b2699b58523c653b5053fb18fa838796cccf9f6f154fe954d1e7
-
SSDEEP
1536:/eVxjSozVNyapeJ5pWIk2UMuDlAmq4Ic35QBfXlm0Yp90DbjlqQpt8e:/eVUozVN3pe3pZk2UMq3q4IHYnv0XRwe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7508b0896cf64bacf0d975f5df72d476_JaffaCakes118
Files
-
7508b0896cf64bacf0d975f5df72d476_JaffaCakes118.exe windows:16568 windows x86 arch:x86
5123eb8103fa39f22c76f13843281726
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetBkColor
SetBkColor
CreateCompatibleBitmap
DeleteDC
LineTo
CreateCompatibleDC
CreateCompatibleBitmap
PatBlt
CreateCompatibleBitmap
MoveToEx
CreateCompatibleDC
DeleteDC
MoveToEx
DeleteDC
LineTo
GetDeviceCaps
GetStockObject
MoveToEx
GetObjectW
CreateCompatibleBitmap
GetObjectW
LineTo
GetTextMetricsW
CreateCompatibleBitmap
PatBlt
TextOutW
GetStockObject
DeleteDC
BitBlt
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
DeleteObject
GetStockObject
TextOutW
GetDeviceCaps
PatBlt
GetTextMetricsW
CreateCompatibleDC
CreateCompatibleDC
DeleteObject
GetDeviceCaps
GetObjectW
CreateCompatibleBitmap
GetTextMetricsW
GetDeviceCaps
GetDeviceCaps
GetDeviceCaps
GetDeviceCaps
BitBlt
DeleteDC
TextOutW
kernel32
SetEvent
GetCurrentProcessId
VirtualFree
lstrlenW
GetModuleFileNameA
FreeLibrary
lstrlenW
LocalFree
GetModuleHandleA
GetModuleHandleA
VirtualAlloc
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameA
GetCommandLineW
LocalAlloc
QueryPerformanceCounter
GetTickCount
SetEvent
GetTickCount
GetTickCount
GetTickCount
QueryPerformanceCounter
GetCommandLineA
GetModuleHandleW
GetTickCount
GetModuleFileNameA
SetUnhandledExceptionFilter
GetModuleFileNameA
QueryPerformanceCounter
LocalFree
GetModuleFileNameA
GetCommandLineW
GetCurrentThreadId
SetEvent
GetCurrentThreadId
FormatMessageW
GetModuleFileNameA
lstrcmpiW
GetModuleHandleW
GetModuleHandleW
GetModuleFileNameA
SetUnhandledExceptionFilter
lstrlenW
VirtualFree
FormatMessageW
GetCurrentProcessId
GetModuleFileNameA
GetCurrentProcess
LocalAlloc
WaitForSingleObject
GetACP
lstrlenW
VirtualAlloc
VirtualFree
GetACP
GetACP
VirtualFree
advapi32
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
OpenThreadToken
RegOpenKeyExW
AdjustTokenPrivileges
RegCreateKeyExA
RegQueryInfoKeyW
shell32
SHGetSpecialFolderLocation
SHGetSpecialFolderLocation
CommandLineToArgvW
DragAcceptFiles
ShellAboutW
ExtractIconW
user32
SendMessageW
DestroyWindow
ShowWindow
ReleaseDC
ReleaseDC
GetDC
DefWindowProcW
CreateWindowExW
LoadStringW
LoadStringW
LoadIconW
GetMessageW
SendMessageW
GetSystemMetrics
PostMessageW
GetWindowRect
LoadIconW
LoadIconW
SetTimer
GetDlgItem
SetTimer
GetWindowRect
ReleaseDC
LoadStringW
GetDC
LoadIconW
DestroyWindow
GetMessageW
GetSystemMetrics
GetSystemMetrics
GetDlgItem
GetMessageW
SetTimer
CreateWindowExW
ShowWindow
GetDC
GetDC
LoadStringW
UpdateLayeredWindow
GetDlgItem
CreateWindowExW
GetWindowRect
DefWindowProcW
CreateWindowExW
CreateWindowExW
ReleaseDC
ShowWindow
ReleaseDC
GetWindowRect
ReleaseDC
DestroyWindow
GetSystemMetrics
GetMessageW
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 557KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ