Static task
static1
Behavioral task
behavioral1
Sample
8c04dafdfec9d6ed7ccd23b9cabb684f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8c04dafdfec9d6ed7ccd23b9cabb684f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8c04dafdfec9d6ed7ccd23b9cabb684f_JaffaCakes118
-
Size
1.6MB
-
MD5
8c04dafdfec9d6ed7ccd23b9cabb684f
-
SHA1
c332d3d69e590ff5842ee75f40cb47a1f0466621
-
SHA256
a70a7ae143b0092c16e306c2623c9bc90e329cb15ae57f7232229ed0335b0807
-
SHA512
ed748fb03fa5c59f0861448e24830168f9a0e1ea205310ced4f0be665cb3b03f6fc5de023ff1386bbf7e0d06a8dd4dc57b06db8ff883885ffd72072fcc9621d4
-
SSDEEP
49152:uiPSHqd7vqT4HHraaaVmKTtXonknnJNodzfV:TP7aaapT5LI1fV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c04dafdfec9d6ed7ccd23b9cabb684f_JaffaCakes118
Files
-
8c04dafdfec9d6ed7ccd23b9cabb684f_JaffaCakes118.exe windows:4 windows x86 arch:x86
0c72b082b21b054de7f45e641b56360e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
timeGetTime
gdiplus
GdipCloneImage
GdipCloneBrush
GdipCreateFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdipDrawString
GdipFillRectangleI
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipSetStringFormatAlign
GdipCreateSolidFill
GdiplusShutdown
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteGraphics
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree
GdiplusStartup
GdipSetImageAttributesColorKeys
comctl32
ImageList_AddMasked
InitCommonControlsEx
ImageList_Create
kernel32
VirtualProtect
InitializeCriticalSection
FlushFileBuffers
SetStdHandle
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
lstrcatA
MultiByteToWideChar
GetACP
lstrcpyA
Sleep
CloseHandle
ReleaseMutex
GetLocaleInfoA
GetVersionExA
lstrlenA
CreateMutexA
OpenMutexA
SetFilePointer
LoadLibraryA
VirtualFree
HeapDestroy
DeleteCriticalSection
IsBadCodePtr
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
HeapAlloc
LeaveCriticalSection
EnterCriticalSection
HeapFree
TlsAlloc
GetLastError
TlsGetValue
TlsSetValue
SetLastError
TlsFree
GetModuleFileNameA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcAddress
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetSystemTimeAsFileTime
ExitProcess
GetStringTypeA
GetStringTypeW
HeapSize
LCMapStringA
LCMapStringW
GetFileType
HeapCreate
user32
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
PostQuitMessage
BeginPaint
EndPaint
DestroyWindow
DefWindowProcA
SendMessageA
PostMessageA
DialogBoxParamA
GetClientRect
GetDC
ReleaseDC
GetWindowRect
SetWindowLongA
KillTimer
SetTimer
InvalidateRect
LoadBitmapA
EndDialog
GetDlgItemTextA
GetDlgItem
SetWindowTextA
SetFocus
CreatePopupMenu
LoadStringA
AppendMenuA
GetCursorPos
TrackPopupMenuEx
DestroyMenu
UpdateWindow
GetSystemMetrics
SetRect
CreateWindowExA
SetWindowPos
FillRect
gdi32
DeleteObject
BitBlt
GetObjectA
CreateFontA
SelectObject
CreateCompatibleDC
CreateSolidBrush
DeleteDC
advapi32
RegCreateKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ