Static task
static1
Behavioral task
behavioral1
Sample
049e8be8a98e4595c8c6e3c570a643e8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
049e8be8a98e4595c8c6e3c570a643e8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
049e8be8a98e4595c8c6e3c570a643e8_JaffaCakes118
-
Size
201KB
-
MD5
049e8be8a98e4595c8c6e3c570a643e8
-
SHA1
0cc2f5cf169bb84122dd4bfd6e2acaf1c3310e80
-
SHA256
405a6b65417a21c1e96e451f5f5e24be3746c6afc1e56ffa356e3fd11b58c6f8
-
SHA512
2b9f24dbbcc1ee45278bd2428ddec76781db83e6c1c1a017dfb411697b14c00a2992f0e353b567457043bf6e67430061118c4e3854710b91ae9afb7d428b9f6e
-
SSDEEP
6144:h/bhQexRSsKhiBIZlHN6boenZWI1qGpaNk:FbVOthi2ZF9eQNUf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 049e8be8a98e4595c8c6e3c570a643e8_JaffaCakes118
Files
-
049e8be8a98e4595c8c6e3c570a643e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
a18c16153a2dd0653fc9787961ca0676
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetTickCount
HeapFree
HeapAlloc
LocalFree
LoadLibraryW
CloseHandle
LeaveCriticalSection
LocalAlloc
VirtualProtect
GetLastError
VirtualAlloc
GetVersionExA
FreeLibrary
InterlockedDecrement
LoadLibraryW
InterlockedIncrement
EnterCriticalSection
QueryPerformanceCounter
InitializeCriticalSection
LoadLibraryA
GetSystemTimeAsFileTime
CreateEventW
LocalFree
CreateThread
InterlockedExchange
lstrlenA
GetModuleHandleA
LeaveCriticalSection
VirtualAlloc
GetTickCount
VirtualProtect
GetVersionExA
LoadLibraryW
HeapFree
lstrlenA
lstrlenA
DeleteCriticalSection
FreeLibrary
lstrcmpiW
GetVersionExA
InterlockedDecrement
HeapDestroy
LoadLibraryA
GetModuleFileNameW
GetModuleFileNameA
GetProcessHeap
lstrlenA
UnhandledExceptionFilter
GetCurrentProcessId
CreateEventW
GetCurrentThreadId
GetCurrentProcess
GetSystemTimeAsFileTime
GetProcessHeap
InterlockedIncrement
GetCurrentThreadId
InitializeCriticalSection
GetCurrentThreadId
GetModuleFileNameA
DeleteCriticalSection
CloseHandle
GetTickCount
VirtualProtect
GetSystemTimeAsFileTime
lstrcmpiW
GetVersionExA
gdi32
CreateDIBitmap
LineTo
Polygon
CreateDIBitmap
RoundRect
BitBlt
SetBrushOrgEx
BitBlt
CreateBitmapIndirect
LineTo
CreateCompatibleDC
LineTo
CreateRectRgn
CreateRectRgn
SetWindowExtEx
LineTo
SetTextColor
BitBlt
CreateCompatibleDC
SelectObject
CreateBitmapIndirect
CombineRgn
CreateCompatibleDC
SetTextColor
MoveToEx
GetBrushOrgEx
SetBkColor
CreateDIBitmap
CreateSolidBrush
SetBrushOrgEx
SetWindowOrgEx
SetWindowOrgEx
SetBkMode
GetPixel
SelectObject
GetBkColor
CombineRgn
SetBkMode
SetBkColor
SelectObject
Polygon
Polygon
MoveToEx
CreateRectRgn
PatBlt
Polygon
GetBkMode
LineTo
CreateCompatibleDC
GetWindowOrgEx
CreateDIBSection
GetWindowExtEx
SetBrushOrgEx
CombineRgn
SetBrushOrgEx
GetBrushOrgEx
GetBrushOrgEx
Ellipse
SetTextColor
CreateBitmapIndirect
CreateRectRgn
CreateDIBitmap
CreateDIBitmap
user32
wsprintfA
KillTimer
GetClientRect
InvalidateRect
GetWindowLongW
GetSysColor
ReleaseDC
GetSystemMetrics
SetWindowPos
IsWindow
GetWindowRect
GetDC
InvalidateRect
DefWindowProcW
BeginPaint
PostMessageW
SetWindowLongW
DialogBoxParamW
EnableWindow
GetDesktopWindow
SetDlgItemTextW
DispatchMessageW
DefWindowProcW
GetSystemMetrics
EndPaint
DispatchMessageW
EnableWindow
GetWindowLongW
EndDialog
InvalidateRect
GetWindowLongW
TranslateMessage
KillTimer
GetDlgItem
GetWindowRect
GetWindowRect
CreateWindowExW
DefWindowProcW
EndPaint
SetDlgItemTextW
IsWindow
GetClientRect
DestroyWindow
GetDlgItem
DestroyWindow
LoadCursorW
DispatchMessageW
DestroyWindow
SetTimer
DispatchMessageW
IsWindow
SendMessageW
BeginPaint
PostMessageW
DefWindowProcW
GetDC
MessageBoxW
GetDesktopWindow
wsprintfA
GetWindowLongW
DestroyWindow
Sections
.text Size: 74KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ