Static task
static1
Behavioral task
behavioral1
Sample
89b2b6e88301dc9db67e945f9f1ab84f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
89b2b6e88301dc9db67e945f9f1ab84f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
89b2b6e88301dc9db67e945f9f1ab84f_JaffaCakes118
-
Size
318KB
-
MD5
89b2b6e88301dc9db67e945f9f1ab84f
-
SHA1
a2fec1e08bb09035860c22d9ac956aaeaacefc96
-
SHA256
616e5ec9db77823a2cc78b8ab6077293316d0e860a6de0a8aa1101e76653fa38
-
SHA512
c47d0ae7d520c229a30065348e1a2195e1a21d1358e0fb109fd113b0cd194451ceb0aca812c9060930716d4ba964e478d1a4832b53782ec46a0d1db725b94000
-
SSDEEP
6144:sK7OSubY+pWsZR4gpHEVaT06P+Wq5dayHby062jxV:sW0tpWsZXtEr6WWkdJHeV21
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89b2b6e88301dc9db67e945f9f1ab84f_JaffaCakes118
Files
-
89b2b6e88301dc9db67e945f9f1ab84f_JaffaCakes118.exe windows:5 windows x86 arch:x86
72f10914e41f6b57680b69fb52db6b0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_tzname
wcstombs
_dstbias
_daylight
strtoul
_initterm
_adjust_fdiv
__dllonexit
_onexit
isdigit
toupper
_strupr
strcspn
strncmp
strpbrk
strncat
_beginthreadex
_endthreadex
_stricmp
strtok
malloc
strstr
mktime
difftime
sscanf
strncpy
_strcmpi
_itoa
time
_ltoa
free
_strdup
swprintf
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
atof
atoi
atol
sprintf
wcslen
_timezone
wcscpy
kernel32
GetModuleHandleA
FreeLibrary
QueryPerformanceCounter
ExpandEnvironmentStringsW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
HeapAlloc
HeapFree
CreateTimerQueue
InterlockedIncrement
InterlockedDecrement
RegisterWaitForSingleObject
CreateEventW
CloseHandle
UnregisterWait
DeleteTimerQueueTimer
DeleteTimerQueue
CreateTimerQueueTimer
ChangeTimerQueueTimer
ReleaseMutex
WaitForSingleObject
UnregisterWaitEx
Sleep
GetComputerNameExW
HeapReAlloc
CreateFileW
DeviceIoControl
GetTickCount
HeapDestroy
CreateMutexW
HeapCreate
DisableThreadLibraryCalls
BindIoCompletionCallback
ReadFile
WriteFile
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
DeleteCriticalSection
QueueUserWorkItem
SetEvent
SetLastError
GetProcAddress
advapi32
CryptAcquireContextW
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegEnumValueW
RegisterServiceCtrlHandlerW
SetServiceStatus
RegQueryValueExW
CryptReleaseContext
CryptGenRandom
user32
SetTimer
KillTimer
SetCaretBlinkTime
SwapMouseButton
SetSysColors
SetFocus
GetFocus
GetForegroundWindow
DrawCaptionTempW
SetSysColorsTemp
LoadIconW
EnumDisplaySettingsW
ChangeDisplaySettingsW
SendMessageTimeoutW
FindWindowW
GetWindowRect
MapWindowPoints
SetWindowPos
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetDlgItemTextW
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
GetDesktopWindow
SystemParametersInfoW
GetWindow
GetDlgCtrlID
GetTopWindow
GetClientRect
HiliteMenuItem
EnableMenuItem
LoadMenuW
OffsetRect
InflateRect
GetSystemMetrics
FillRect
DrawFrameControl
DestroyIcon
DrawTextW
DrawEdge
LoadImageW
InvalidateRect
DefWindowProcW
EndPaint
BeginPaint
GetSysColor
RegisterClassW
LoadCursorW
PostMessageW
GetParent
SetWindowTextW
EnableWindow
comctl32
PropertySheetW
Sections
.text Size: 62KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 230KB - Virtual size: 391KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ