Static task
static1
Behavioral task
behavioral1
Sample
8b354c92329289d3e5e72ccd1b0c2cba_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8b354c92329289d3e5e72ccd1b0c2cba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8b354c92329289d3e5e72ccd1b0c2cba_JaffaCakes118
-
Size
320KB
-
MD5
8b354c92329289d3e5e72ccd1b0c2cba
-
SHA1
46e44676be2838f27e558192828d40ef673f6708
-
SHA256
1312a2ae93e11e24ebc165d6b784dcf100c77b4ed2ec1367d2e836b4dbd6443d
-
SHA512
cc5de70975141b20f1489fa5f467c7f7f1173d3e7566846d61a7f871164ab4f8a5c075e3c3a038f608e975269a13bc6b49e005cb12f12a52225c4d21b542bb16
-
SSDEEP
6144:91yjYVv50t1lR7+VDn9tqB6kOW93F6y/2pNg/RfFrTBHZEwd:zyBR7iQ6klRdrTF7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b354c92329289d3e5e72ccd1b0c2cba_JaffaCakes118
Files
-
8b354c92329289d3e5e72ccd1b0c2cba_JaffaCakes118.exe windows:4 windows x86 arch:x86
166643496cac54749d93c0221cd4822f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHSetValueA
PathFindExtensionA
PathFindFileNameA
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
kernel32
GlobalAddAtomA
FlushFileBuffers
SetEndOfFile
GetThreadLocale
GlobalGetAtomNameA
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
HeapReAlloc
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
GetConsoleCP
GetConsoleMode
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetACP
SetStdHandle
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
RaiseException
LocalAlloc
SetFilePointer
ReadFile
GetCurrentProcess
GetModuleFileNameA
SetLastError
GetVersionExA
TerminateProcess
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetCurrentProcessId
WriteFile
SetUnhandledExceptionFilter
GetSystemTime
GetTimeZoneInformation
lstrlenA
InterlockedExchange
GetVersion
CreateFileA
CloseHandle
GetLastError
MultiByteToWideChar
lstrcmpA
CompareStringA
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
EnterCriticalSection
user32
ClientToScreen
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
UnregisterClassA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
LoadCursorA
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
DestroyWindow
IsWindow
GetDlgItem
GetSystemMetrics
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetDC
ReleaseDC
GetMenuItemCount
GetSubMenu
GetSysColorBrush
DestroyMenu
ShowWindow
SetForegroundWindow
GetMenu
GetForegroundWindow
GetWindow
IsWindowVisible
GetParent
GetClassNameA
GetWindowThreadProcessId
PostMessageA
RegisterWindowMessageA
EnableWindow
GetWindowTextA
GetCursorPos
SetWindowTextA
LoadIconA
GetMessageA
gdi32
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ExtTextOutA
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
DeleteObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ