Static task
static1
Behavioral task
behavioral1
Sample
7748033104ab0ab4ee972b5144e6cd8b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
7748033104ab0ab4ee972b5144e6cd8b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7748033104ab0ab4ee972b5144e6cd8b_JaffaCakes118
-
Size
440KB
-
MD5
7748033104ab0ab4ee972b5144e6cd8b
-
SHA1
1c1527e1b2cfbf13d2137da664642f44ce2eeab6
-
SHA256
47ae5b13cc3738cf6825b738c9596647bdc066b3310cd73cc280ef1bf06fc57f
-
SHA512
60d8fffae406b71248bf2c950695c333e0b6a7f4c0749f057c4dafb8ca79b8439b607917aa44d0293fe0e0fb6f27830b711082bfae98a2fad33f9aacaa0c7753
-
SSDEEP
6144:yKWrp7MyzTDqwgHmaE4U2CfWHgct5XlWh6hL2WkvZ0Lm1JPztdlRHrwZH+:OfDpgHbE4BCfHct6h6hfLmfxhHUZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7748033104ab0ab4ee972b5144e6cd8b_JaffaCakes118
Files
-
7748033104ab0ab4ee972b5144e6cd8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f9d9a9cded55a7ca05a4fd82922fa1f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetIconInfo
DdeDisconnectList
CreateWindowExW
DlgDirSelectExA
BlockInput
RealGetWindowClass
GetSubMenu
CreateMDIWindowA
SetPropA
DialogBoxIndirectParamW
GetScrollPos
IsCharAlphaNumericA
EmptyClipboard
SetClassLongW
DdeSetQualityOfService
SetMenuItemBitmaps
SystemParametersInfoW
DestroyWindow
UnregisterDeviceNotification
PostQuitMessage
OemToCharBuffW
SetWindowTextA
DestroyCursor
GetActiveWindow
LoadMenuW
RemovePropW
FlashWindow
SetScrollInfo
IsCharLowerA
GetClassInfoW
DragDetect
IsWindowVisible
GetListBoxInfo
VkKeyScanExW
LoadStringA
CreateIcon
ShowWindow
GetKeyboardLayoutNameA
TranslateAcceleratorA
CascadeChildWindows
GetGuiResources
DdePostAdvise
EnumDisplaySettingsExW
MessageBoxA
GetTabbedTextExtentA
WaitForInputIdle
ScreenToClient
GetWindowDC
SetFocus
DrawTextExW
CreateDialogIndirectParamW
GetSystemMenu
CopyIcon
SetCapture
RegisterClassA
wsprintfW
CheckRadioButton
ShowOwnedPopups
SendInput
RegisterClassExA
DdeInitializeA
LoadAcceleratorsW
IsRectEmpty
UnregisterHotKey
SetUserObjectInformationW
GetClassNameA
DdeQueryConvInfo
DefWindowProcW
SendNotifyMessageW
gdi32
GetTextExtentPointA
FillPath
GetKerningPairs
PolyTextOutW
PlayEnhMetaFileRecord
SetMetaFileBitsEx
kernel32
MultiByteToWideChar
GetSystemTimeAsFileTime
CreateProcessA
InitializeCriticalSection
lstrcmpiA
OpenMutexA
FlushFileBuffers
EnterCriticalSection
HeapCreate
CloseHandle
UnmapViewOfFile
GetModuleHandleA
GetEnvironmentStringsW
FlushInstructionCache
InterlockedDecrement
TlsSetValue
VirtualAlloc
FormatMessageW
GetOEMCP
GetCurrentThreadId
LCMapStringA
UnhandledExceptionFilter
TerminateProcess
FreeEnvironmentStringsA
GetACP
InterlockedIncrement
GetSystemTime
GetCurrentThread
FindAtomW
IsBadWritePtr
GetStringTypeW
CreateNamedPipeA
SetFilePointer
GetStartupInfoA
GetTickCount
GetCurrentProcess
SetLastError
GetStdHandle
TlsGetValue
GetCommandLineA
HeapDestroy
WritePrivateProfileStructA
HeapAlloc
CompareStringA
EnumTimeFormatsA
SetStdHandle
CompareStringW
LCMapStringW
ReadFile
VirtualFree
SetHandleCount
HeapFree
GetEnvironmentStrings
HeapReAlloc
RtlUnwind
WriteFile
GetStringTypeA
TlsFree
FreeEnvironmentStringsW
GetLocalTime
SetEnvironmentVariableA
QueryPerformanceCounter
TlsAlloc
GetTimeZoneInformation
InterlockedExchange
GetCPInfo
GetPrivateProfileStringA
ExitProcess
GetModuleFileNameA
GetVersion
GetLastError
GetProcAddress
GetFileType
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
VirtualQuery
GetCurrentProcessId
WriteProfileSectionA
CreateMutexA
LoadLibraryA
comctl32
CreateToolbar
ImageList_GetIconSize
ImageList_Copy
ImageList_Create
ImageList_Draw
CreateToolbarEx
GetEffectiveClientRect
ImageList_Merge
ImageList_Destroy
ImageList_GetIcon
InitCommonControlsEx
ImageList_SetOverlayImage
ImageList_LoadImageW
ImageList_SetIconSize
ImageList_GetBkColor
CreatePropertySheetPageW
ImageList_GetFlags
ImageList_GetDragImage
CreateMappedBitmap
CreateStatusWindowW
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ