Static task
static1
Behavioral task
behavioral1
Sample
83203b08a7b25109bdac4ddd0806d19b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
83203b08a7b25109bdac4ddd0806d19b_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
83203b08a7b25109bdac4ddd0806d19b_JaffaCakes118
-
Size
401KB
-
MD5
83203b08a7b25109bdac4ddd0806d19b
-
SHA1
fdfa5d685dddc3c74f965b6ba07927e1556e88c4
-
SHA256
7a8357b2dc61462cadbbc07275afcab1c09ee8897c466fbfc7fce57f5be8f188
-
SHA512
bdd5b437327e245eb03d44d7b1247b2dec7fdaad566d1d4f822a7f37c4fce3097039e627eed5f9f94a8071877f6d4a8dedd9f0a40a4ac9bcd7633f7b064ccac0
-
SSDEEP
12288:sEWVghGJd/Vadg188uOnvqtIZ44hlc6P:JWVmsd/YdgK1Ony54hlc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83203b08a7b25109bdac4ddd0806d19b_JaffaCakes118
Files
-
83203b08a7b25109bdac4ddd0806d19b_JaffaCakes118.exe windows:4 windows x86 arch:x86
b6f86fc056b5dbadb66990eb2e5fe1cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InternalGetWindowText
AppendMenuA
AdjustWindowRectEx
LoadBitmapA
SetDeskWallpaper
ArrangeIconicWindows
WINNLSGetIMEHotkey
CreateWindowExW
DefMDIChildProcW
DefWindowProcW
RegisterClassExA
MoveWindow
OpenInputDesktop
DdeConnect
GetInputState
ShowWindow
WINNLSGetEnableStatus
RegisterClassA
CreateMDIWindowW
DestroyWindow
MessageBoxW
SetFocus
DdeReconnect
comctl32
ImageList_BeginDrag
ImageList_SetImageCount
DrawStatusTextA
ImageList_Draw
ImageList_SetFilter
CreateMappedBitmap
ImageList_Remove
InitCommonControlsEx
ImageList_SetIconSize
advapi32
AbortSystemShutdownW
CryptGetDefaultProviderW
ReportEventW
RegEnumValueW
RegNotifyChangeKeyValue
RegEnumKeyExA
CryptGetProvParam
AbortSystemShutdownA
RegOpenKeyExA
RegLoadKeyA
CryptEnumProvidersA
kernel32
GetDateFormatW
HeapAlloc
LoadResource
RtlUnwind
LCMapStringA
CompareStringA
TransactNamedPipe
WideCharToMultiByte
FindResourceA
UnlockFileEx
VirtualAlloc
ReadConsoleA
InterlockedDecrement
SetLastError
GetSystemDefaultLangID
ExitProcess
GetLastError
GetVersionExA
MultiByteToWideChar
TlsGetValue
GetModuleFileNameW
VirtualFree
HeapReAlloc
GetStringTypeW
AddAtomA
DeleteFileA
GetACP
GetProcAddress
GetCurrentProcess
GetCommandLineA
EnterCriticalSection
HeapDestroy
LoadLibraryExW
GetStdHandle
GetLocaleInfoA
TerminateProcess
SetLocalTime
ReadConsoleInputA
QueryPerformanceCounter
GetFileType
OutputDebugStringA
VirtualQuery
HeapValidate
WriteConsoleA
SetEvent
GetAtomNameA
CreateProcessW
GetSystemInfo
GetDateFormatA
GetCurrentProcessId
GetUserDefaultLangID
WriteFile
FoldStringA
LeaveCriticalSection
SystemTimeToTzSpecificLocalTime
GetEnvironmentStringsW
LoadLibraryA
LocalLock
GetTickCount
CreateDirectoryExA
InterlockedIncrement
SetStdHandle
SetEnvironmentVariableW
WriteConsoleInputW
FlushFileBuffers
GetStringTypeExA
IsBadWritePtr
HeapFree
GetModuleHandleA
GetCurrentThread
InterlockedExchange
VirtualUnlock
lstrlenA
lstrcpy
GetTimeZoneInformation
InitializeCriticalSection
GetPrivateProfileSectionNamesW
CreateSemaphoreA
TlsFree
CreateFileW
OpenMutexA
GetStartupInfoA
FillConsoleOutputCharacterW
SetEnvironmentVariableA
FreeEnvironmentStringsA
CreateDirectoryExW
EnumCalendarInfoExW
GetDiskFreeSpaceExW
ReadFileEx
TryEnterCriticalSection
IsValidCodePage
LCMapStringW
EnumSystemLocalesA
SetHandleCount
GetStringTypeA
GetPrivateProfileSectionNamesA
lstrcpyA
CloseHandle
VirtualProtect
IsValidLocale
UnhandledExceptionFilter
GetUserDefaultLCID
GetEnvironmentStrings
GetModuleFileNameA
CompareStringW
TlsAlloc
GetStringTypeExW
DebugBreak
TlsSetValue
DeleteCriticalSection
GetStartupInfoW
OpenProcess
CreateMutexA
GetCurrentThreadId
GetNumberFormatW
GetCommandLineW
GetTimeFormatA
SetConsoleCtrlHandler
GetCPInfo
SetUnhandledExceptionFilter
GetLocaleInfoW
GetSystemTimeAsFileTime
DosDateTimeToFileTime
IsBadReadPtr
HeapCreate
GetOEMCP
ReadFile
FreeEnvironmentStringsW
GetThreadSelectorEntry
EnumResourceNamesA
SetFilePointer
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ