Static task
static1
Behavioral task
behavioral1
Sample
031ac67582aec098cc42ff67fc6404ff_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
031ac67582aec098cc42ff67fc6404ff_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
031ac67582aec098cc42ff67fc6404ff_JaffaCakes118
-
Size
163KB
-
MD5
031ac67582aec098cc42ff67fc6404ff
-
SHA1
19c1aadc9b9cd9ecc880df70f919a65e8f28b208
-
SHA256
7bb08a6b8a295e55c8a282fd3b05a3a10bef2d1392d6e232dd7e523c249fee9a
-
SHA512
4c582164bf379dcb4456eb874b7c413fee12cfd9e07f0961ac287459174aa52a2a241fc8bfe01ed374dc19a88c14f8ec696f04ac2b3f8e5f0ab69a0ae98a0ee9
-
SSDEEP
3072:O6TEajMOJjCwZAn9azNKrVu/GVHyCyOyQ0sEmuABBko:hTEaj12wun6pGVPrVio
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 031ac67582aec098cc42ff67fc6404ff_JaffaCakes118
Files
-
031ac67582aec098cc42ff67fc6404ff_JaffaCakes118.exe windows:8 windows x86 arch:x86
49a1a1498748c16a451dc7300fe72106
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetModuleHandleA
GetModuleHandleW
WaitForSingleObject
GetProcessHeap
SetEvent
GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCommandLineW
LocalAlloc
GetTickCount
GetModuleHandleW
SetUnhandledExceptionFilter
GetModuleHandleW
SetUnhandledExceptionFilter
LocalAlloc
SetEvent
GetCurrentProcessId
LocalAlloc
GetProcessHeap
GetProcessHeap
GetCommandLineA
MultiByteToWideChar
VirtualFree
QueryPerformanceCounter
QueryPerformanceCounter
SleepEx
QueryPerformanceCounter
SetEvent
GetModuleFileNameA
GetCurrentProcessId
WaitForSingleObject
GetTickCount
LocalFree
GetModuleHandleA
SetUnhandledExceptionFilter
GetModuleHandleA
GetCurrentProcess
GetModuleFileNameA
SetEvent
GetModuleHandleW
VirtualFree
GetModuleHandleW
GetCurrentProcess
VirtualFree
WaitForSingleObject
GetModuleFileNameA
WaitForSingleObject
WaitForSingleObject
QueryPerformanceCounter
GetProcessHeap
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentThreadId
FormatMessageW
GetTickCount
QueryPerformanceCounter
LocalAlloc
LocalAlloc
GetTickCount
MultiByteToWideChar
GetProcessHeap
GetCommandLineA
QueryPerformanceCounter
GetModuleHandleW
GetModuleHandleA
VirtualFree
GetTickCount
GetModuleHandleA
LocalAlloc
GetModuleFileNameA
MultiByteToWideChar
SetEvent
LocalAlloc
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTickCount
VirtualFree
GetACP
WaitForSingleObject
SetEvent
GetModuleHandleW
SetUnhandledExceptionFilter
GetCurrentProcess
GetCommandLineA
SetUnhandledExceptionFilter
GetCommandLineA
GetCurrentThreadId
FormatMessageW
GetTickCount
QueryPerformanceCounter
VirtualFree
GetModuleHandleA
GetACP
LocalFree
WaitForSingleObject
GetCurrentProcessId
GetCurrentProcessId
GetACP
SetUnhandledExceptionFilter
VirtualFree
GetCurrentProcessId
GetTickCount
GetTickCount
ntdll
NtAllocateVirtualMemory
user32
SendMessageW
SetTimer
ShowWindow
GetSystemMetrics
DestroyWindow
SetTimer
GetWindowRect
GetWindowRect
CreateWindowExW
PostMessageW
DestroyWindow
CreateWindowExW
DestroyWindow
CreateWindowExW
DestroyWindow
PostMessageW
LoadIconW
DefWindowProcW
GetSystemMetrics
GetDlgItem
GetMessageW
SetTimer
GetDlgItem
LoadIconW
DestroyWindow
SetTimer
DestroyWindow
GetDlgItem
DefWindowProcW
ShowWindow
CreateWindowExW
SetTimer
SendMessageW
ShowWindow
GetMessageW
DestroyWindow
DefWindowProcW
GetDC
ReleaseDC
SetTimer
GetDC
GetDlgItem
SetTimer
CreateWindowExW
ShowWindow
ReleaseDC
GetSystemMetrics
GetDC
PostMessageW
SendMessageW
GetSystemMetrics
DestroyWindow
SetTimer
DefWindowProcW
GetDlgItem
GetDC
DefWindowProcW
GetDC
CreateWindowExW
LoadIconW
ShowWindow
ShowWindow
SendMessageW
ShowWindow
PostMessageW
ShowWindow
SendMessageW
GetMessageW
GetSystemMetrics
SendMessageW
GetDC
SendMessageW
ReleaseDC
SendMessageW
PostMessageW
PostMessageW
GetSystemMetrics
GetDC
GetWindowRect
ReleaseDC
SetTimer
ReleaseDC
DestroyWindow
ReleaseDC
GetDC
DefWindowProcW
DestroyWindow
GetSystemMetrics
DestroyWindow
CreateWindowExW
DefWindowProcW
DefWindowProcW
PostMessageW
CreateWindowExW
CreateWindowExW
GetWindowRect
DestroyWindow
GetSystemMetrics
DefWindowProcW
ReleaseDC
SendMessageW
LoadIconW
GetDlgItem
gdi32
GetStockObject
DeleteObject
DeleteObject
LineTo
GetObjectW
SetTextColor
DeleteObject
DeleteObject
PatBlt
DeleteObject
LineTo
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
DeleteDC
CreateCompatibleDC
DeleteDC
CreateCompatibleDC
GetTextMetricsW
PatBlt
MoveToEx
BitBlt
MoveToEx
CreateCompatibleBitmap
GetTextMetricsW
GetStockObject
LineTo
SetTextColor
GetObjectW
GetStockObject
DeleteObject
PatBlt
BitBlt
DeleteDC
CreateCompatibleDC
BitBlt
PatBlt
CreateCompatibleBitmap
PatBlt
GetDeviceCaps
GetObjectW
DeleteObject
GetDeviceCaps
GetTextMetricsW
PatBlt
LineTo
DeleteObject
SetTextColor
CreateCompatibleBitmap
GetTextMetricsW
SelectObject
LineTo
MoveToEx
GetObjectW
SelectObject
SelectObject
GetDeviceCaps
MoveToEx
SelectObject
DeleteObject
CreateCompatibleBitmap
MoveToEx
GetTextMetricsW
DeleteDC
DeleteDC
SetTextColor
CreateCompatibleDC
GetObjectW
GetObjectW
SelectObject
SetTextColor
CreateCompatibleDC
GetStockObject
BitBlt
CreateCompatibleBitmap
GetStockObject
LineTo
GetObjectW
SetTextColor
LineTo
LineTo
PatBlt
BitBlt
GetTextMetricsW
SetTextColor
MoveToEx
GetStockObject
SelectObject
GetDeviceCaps
CreateCompatibleDC
DeleteObject
DeleteDC
SetTextColor
GetTextMetricsW
GetObjectW
BitBlt
Sections
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 123KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ