Static task
static1
Behavioral task
behavioral1
Sample
04ab085ce05ce7346633fe098b2e8f37_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
04ab085ce05ce7346633fe098b2e8f37_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
04ab085ce05ce7346633fe098b2e8f37_JaffaCakes118
-
Size
31KB
-
MD5
04ab085ce05ce7346633fe098b2e8f37
-
SHA1
916a7b3f73323b6ec348b92fed6d302bfa4bd206
-
SHA256
c3d377e1186be1801d952e52f0e654ef89852a4617810c42ce6d5fe3dff46b8a
-
SHA512
3459742c6ae1709aa1ecf7e493ade52004ce24a55ce6fac1623a75a8636f2875bd10c2245115d6e14407a7f9eecba58737caa9e3bbfd430f3d7c285f473ed4b5
-
SSDEEP
768:apkTSngyb9mzz4tU9qtUBwl1XdfJXTHJYdQId1R:DSpmMHg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04ab085ce05ce7346633fe098b2e8f37_JaffaCakes118
Files
-
04ab085ce05ce7346633fe098b2e8f37_JaffaCakes118.exe windows:4 windows x86 arch:x86
5178fb7d5c710f03e051f26cf3dcbf26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
InterlockedIncrement
GetProcessHeap
DeleteCriticalSection
GetModuleHandleA
CloseHandle
VirtualAlloc
GetModuleFileNameW
CloseHandle
GetTickCount
QueryPerformanceCounter
GetProcAddress
InitializeCriticalSection
GetCurrentProcess
lstrcmpiW
HeapFree
InterlockedCompareExchange
VirtualAlloc
lstrlenA
InitializeCriticalSection
LeaveCriticalSection
FreeLibrary
ReadFile
GetTickCount
Sleep
GetTickCount
DisableThreadLibraryCalls
GetTickCount
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
GetModuleFileNameW
GetModuleHandleA
CreateEventW
CloseHandle
InterlockedCompareExchange
CreateEventW
GetTickCount
GetModuleHandleW
SetLastError
CreateFileW
InterlockedDecrement
ReadFile
InterlockedExchange
Sleep
SetLastError
CreateThread
DisableThreadLibraryCalls
SetLastError
InitializeCriticalSection
QueryPerformanceCounter
HeapAlloc
GetModuleFileNameA
InterlockedCompareExchange
LeaveCriticalSection
GetModuleFileNameA
HeapDestroy
lstrcmpiW
HeapAlloc
EnterCriticalSection
GetModuleHandleW
CloseHandle
EnterCriticalSection
InterlockedExchange
lstrlenA
EnterCriticalSection
LoadLibraryA
EnterCriticalSection
InterlockedCompareExchange
gdi32
LineTo
CreateRectRgn
CreateRectRgn
GetPixel
Ellipse
MoveToEx
LineTo
GetPixel
GetWindowOrgEx
StretchBlt
GetBrushOrgEx
CreateRectRgn
Ellipse
Ellipse
SetWindowExtEx
SetBkMode
SetWindowExtEx
GetPixel
SetTextColor
SetBkMode
Rectangle
CreatePen
LineTo
CreatePen
CreateBitmap
CombineRgn
GetWindowExtEx
CreateBitmap
CreatePen
SetBkColor
Rectangle
GetPixel
GetWindowOrgEx
PatBlt
BitBlt
BitBlt
BitBlt
CreateFontIndirectA
CreateBitmapIndirect
SetPixel
CreateRectRgn
CreateFontA
CreateCompatibleDC
RoundRect
GetBkMode
CreateBitmapIndirect
CreateDIBSection
SetBkMode
BitBlt
CreateBitmapIndirect
SetBkColor
Polygon
StretchBlt
SetBrushOrgEx
CreateBitmap
CreateDIBSection
RoundRect
GetCurrentObject
RoundRect
CreateRectRgn
user32
KillTimer
GetParent
SendDlgItemMessageW
SetForegroundWindow
SendDlgItemMessageW
GetDesktopWindow
SetCursor
DestroyWindow
SetForegroundWindow
wsprintfA
GetSysColor
PeekMessageW
LoadStringW
ReleaseDC
BeginPaint
GetSysColor
SetDlgItemTextW
SetDlgItemTextW
SetWindowTextW
GetClientRect
BeginPaint
PostMessageW
PostQuitMessage
SendDlgItemMessageW
wsprintfA
BeginPaint
LoadCursorW
InvalidateRect
EndPaint
SetTimer
DialogBoxParamW
SetWindowPos
SendMessageW
SetForegroundWindow
SendDlgItemMessageW
GetSystemMetrics
PostMessageW
KillTimer
wsprintfA
IsWindow
GetDesktopWindow
LoadStringW
IsWindow
EndPaint
GetSysColor
PostQuitMessage
SetTimer
ShowWindow
GetWindowRect
InvalidateRect
LoadIconW
EndPaint
BeginPaint
BeginPaint
SetWindowTextW
wsprintfA
EndPaint
ReleaseDC
GetClientRect
TranslateMessage
SendDlgItemMessageW
SetWindowLongW
SetForegroundWindow
GetDlgItem
SetForegroundWindow
Sections
.text Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ