Static task
static1
Behavioral task
behavioral1
Sample
74e5a3d9ed4d7c6ef19ebd0454bfd138_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74e5a3d9ed4d7c6ef19ebd0454bfd138_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
74e5a3d9ed4d7c6ef19ebd0454bfd138_JaffaCakes118
-
Size
192KB
-
MD5
74e5a3d9ed4d7c6ef19ebd0454bfd138
-
SHA1
0df780af18235bf110ebcb3d2b65cb5543584010
-
SHA256
9659bf775655aee61513ad3e350f7bf915d8ec04f5ad959a96a68db19c517def
-
SHA512
b243ada26b17e2786cfe377bd553e697987b1aaa2bf77930a8b45d443617a71330073b7b6565dc7947412d8ebe7dceb99be0ab30c97bfc2318e17ca8a80ecaac
-
SSDEEP
3072:MSel5Pf7CFW/Gb6p4HjyVKbjWPb9/K+2RLtiWYC:MXzfQW/GWp4HGaWPx/b9WYC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74e5a3d9ed4d7c6ef19ebd0454bfd138_JaffaCakes118
Files
-
74e5a3d9ed4d7c6ef19ebd0454bfd138_JaffaCakes118.exe windows:4 windows x86 arch:x86
cfdc19beb9a2837da376997b0aec4c33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
shlwapi
PathFileExistsA
SHGetValueA
kernel32
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
WriteFile
SetFilePointer
FlushFileBuffers
GetThreadLocale
GetCurrentThreadId
CreateSemaphoreA
ReleaseSemaphore
GlobalGetAtomNameA
GetModuleHandleA
InterlockedDecrement
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
RaiseException
HeapReAlloc
VirtualAlloc
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetFileType
GetProcessHeap
GetStartupInfoA
SetStdHandle
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
GetConsoleCP
GetConsoleMode
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
lstrcmpA
GetCommandLineA
GetVersionExA
GetCurrentProcess
CreateFileA
DeviceIoControl
FindResourceA
LoadResource
LockResource
SizeofResource
WaitForSingleObject
TerminateProcess
HeapAlloc
HeapFree
SetLastError
CloseHandle
FreeLibrary
LoadLibraryA
GetProcAddress
OutputDebugStringA
FormatMessageA
LocalFree
GetSystemTime
GetTimeZoneInformation
GetModuleFileNameA
lstrlenA
lstrcmpiA
CompareStringA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
user32
DrawTextExA
GrayStringA
ClientToScreen
UnregisterClassA
DestroyMenu
PostQuitMessage
DrawTextA
TabbedTextOutA
SetWindowTextA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
LoadCursorA
GetDC
ReleaseDC
GetSysColor
PostMessageA
GetSysColorBrush
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
SendMessageA
GetKeyState
GetWindowThreadProcessId
RegisterWindowMessageA
GetWindowTextA
GetWindow
MessageBoxA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSystemMetrics
ValidateRect
PeekMessageA
GetDlgCtrlID
gdi32
SetMapMode
DeleteObject
DeleteDC
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetStockObject
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ