Static task
static1
Behavioral task
behavioral1
Sample
034820bb1d59e9036fd964474007d276_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
034820bb1d59e9036fd964474007d276_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
034820bb1d59e9036fd964474007d276_JaffaCakes118
-
Size
512KB
-
MD5
034820bb1d59e9036fd964474007d276
-
SHA1
ca4ef52e852c076b8ffc68f6f27c536c2b8dfc9f
-
SHA256
89a7362af7f9266a05a75a12d0734315451031dfabc8927b927ccb432c70962e
-
SHA512
4f2ae4ba173a114f8a3134d9a8883084bad9095bfb0c15f93a47616b1d461e3d2a89d7ba0bef91d7d24b63d087b225cab1f3018ef33e9aeb25a56401beba5e62
-
SSDEEP
12288:R4bg9W/GuSKEIhWV6noPEWsflNcwc0JSBeCfov2ErYp:vohJoPEy5fovap
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034820bb1d59e9036fd964474007d276_JaffaCakes118
Files
-
034820bb1d59e9036fd964474007d276_JaffaCakes118.exe windows:4 windows x86 arch:x86
15921dca362418a51525b63eb87e4845
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetCurrentProcess
GetTickCount
LocalAlloc
GetCurrentThreadId
MultiByteToWideChar
GetModuleHandleW
VirtualProtect
GetProcessHeap
CreateFileW
GetCurrentThreadId
HeapFree
FreeLibrary
GetProcAddress
GetModuleHandleW
lstrlenA
DeleteCriticalSection
InterlockedDecrement
HeapAlloc
InterlockedExchange
GetCurrentThreadId
GetCurrentProcess
HeapDestroy
GetModuleHandleA
InterlockedIncrement
GetCurrentProcess
CreateEventW
LoadLibraryA
GetModuleHandleA
HeapFree
GetModuleFileNameA
GetModuleFileNameA
HeapFree
LoadLibraryA
HeapFree
HeapAlloc
LoadLibraryA
GetSystemTimeAsFileTime
VirtualAlloc
VirtualProtect
InitializeCriticalSection
VirtualProtect
ReadFile
FreeLibrary
GetModuleHandleW
LocalFree
InterlockedIncrement
InterlockedIncrement
VirtualProtect
VirtualProtect
InterlockedDecrement
lstrcmpiW
InterlockedCompareExchange
GetModuleFileNameA
LoadLibraryA
GetModuleHandleW
HeapDestroy
CloseHandle
GetModuleHandleW
ReadFile
user32
GetParent
PostMessageW
SetFocus
GetClientRect
CharNextW
PeekMessageW
GetSystemMetrics
IsDlgButtonChecked
ReleaseDC
wsprintfA
MessageBoxW
SendMessageW
CreateWindowExW
EndDialog
SendDlgItemMessageW
SendDlgItemMessageW
GetWindowLongW
BeginPaint
BeginPaint
CharNextW
PostMessageW
wsprintfA
SetCursor
LoadIconW
KillTimer
DestroyWindow
SetWindowLongW
ReleaseDC
GetWindowRect
PostMessageW
BeginPaint
PostQuitMessage
CreateWindowExW
InvalidateRect
LoadCursorW
GetDesktopWindow
GetWindowLongW
SendDlgItemMessageW
GetClientRect
SetCursor
MessageBoxW
PeekMessageW
SetWindowTextW
InvalidateRect
SetWindowLongW
SetWindowLongW
GetFocus
SetForegroundWindow
GetWindowLongW
DefWindowProcW
SetFocus
LoadCursorW
SetDlgItemTextW
GetFocus
GetSystemMetrics
SetFocus
wsprintfA
GetParent
TranslateMessage
SetCursor
SetDlgItemTextW
SetWindowPos
ShowWindow
SetCursor
PostQuitMessage
DefWindowProcW
DispatchMessageW
GetWindowLongW
gdi32
Rectangle
CreateFontIndirectA
Rectangle
CombineRgn
GetBrushOrgEx
CreateCompatibleDC
SetBkColor
RoundRect
CreateDIBSection
GetCurrentObject
CreateDIBSection
CreatePen
SetPixel
CreatePen
RoundRect
BitBlt
CreateBitmapIndirect
GetBkMode
GetPixel
GetBkMode
CreateFontIndirectA
SetTextColor
GetPixel
CreateRectRgn
CreateDIBSection
CreateBitmapIndirect
CreateDIBSection
GetCurrentObject
CreateBitmapIndirect
CreatePen
PatBlt
CreateSolidBrush
RoundRect
Ellipse
BitBlt
SetBkColor
SetBkMode
GetBkMode
BitBlt
LineTo
CreateDIBSection
CreateBitmap
CreateRectRgn
SetBkMode
SetTextColor
Ellipse
MoveToEx
SetWindowExtEx
GetWindowExtEx
BitBlt
CreateRectRgn
Ellipse
GetWindowOrgEx
GetCurrentObject
CreateDIBitmap
SetBkColor
CreateFontIndirectA
GetWindowExtEx
GetWindowExtEx
GetBrushOrgEx
SetWindowExtEx
Ellipse
MoveToEx
LineTo
Rectangle
Sections
.text Size: 495KB - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ