Static task
static1
Behavioral task
behavioral1
Sample
8cea5f54b60d73c089d892ea62398bda_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8cea5f54b60d73c089d892ea62398bda_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cea5f54b60d73c089d892ea62398bda_JaffaCakes118
-
Size
272KB
-
MD5
8cea5f54b60d73c089d892ea62398bda
-
SHA1
4a583f520407141a40acd2d0ae651cbbc3154a9c
-
SHA256
afc51ef4b0eb34e90644963816ad496d822c98d1122b9e1ca31ad5afc09b72dc
-
SHA512
d19180648107da9587ef28f1ae5b877aa765db246d54087c6191222090b99ac8e03de8660b91dfca7b6a5e8a776b093d7b6d220b81971622ed1eb133431af2df
-
SSDEEP
6144:RhNYNPY2WtEAUbmuGMB0BPZzWpg5mz41Gv:RhQWtE5bqL/qp341Gv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cea5f54b60d73c089d892ea62398bda_JaffaCakes118
Files
-
8cea5f54b60d73c089d892ea62398bda_JaffaCakes118.exe windows:4 windows x86 arch:x86
51b37b2eca407cf02e679ca4d18b6b11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
SetCurrentDirectoryW
GetLastError
ResumeThread
GetCurrentThread
GetDriveTypeW
VirtualFree
SizeofResource
WideCharToMultiByte
GlobalLock
GetFileAttributesExW
ResetEvent
FindClose
SetEvent
GetPrivateProfileStringW
FindFirstChangeNotificationW
InterlockedDecrement
GetCurrentThreadId
GetLocalTime
CreateWaitableTimerW
LoadLibraryW
CancelWaitableTimer
WaitForMultipleObjects
GlobalDeleteAtom
WritePrivateProfileStringW
ExitProcess
GetProcessHeap
HeapAlloc
HeapFree
HeapSize
IsBadReadPtr
LoadLibraryA
VirtualProtect
LoadResource
GetModuleFileNameW
CreateProcessW
CreateEventW
ReadFile
DuplicateHandle
FindNextChangeNotification
LockResource
GetModuleHandleW
GetLogicalDrives
lstrcpyW
FreeLibrary
GetCurrentProcessId
MulDiv
GetProcAddress
SetWaitableTimer
VirtualAlloc
MoveFileW
SetLastError
GetUserDefaultLangID
GetCurrentProcess
SetEndOfFile
ReadProcessMemory
TerminateThread
QueryDosDeviceW
FindNextFileW
SuspendThread
FindFirstFileW
SetThreadPriority
user32
GetCursorPos
PostMessageW
MessageBoxW
SetWindowPos
RegisterWindowMessageW
InvalidateRect
LoadImageW
GetClassNameW
GetParent
IsWindow
LoadBitmapW
GetDlgItem
AppendMenuW
LoadIconW
RedrawWindow
GetWindowThreadProcessId
TranslateMessage
DialogBoxParamW
SystemParametersInfoW
SetCapture
SetCursorPos
UpdateWindow
wsprintfW
DefWindowProcW
DestroyMenu
RegisterHotKey
SendDlgItemMessageW
RegisterClassExW
WindowFromPoint
GetMessageW
ReleaseCapture
GetSystemMetrics
SetCursor
ReleaseDC
EnableWindow
FillRect
DispatchMessageW
CreateWindowExW
SetDlgItemTextW
gdi32
BitBlt
LineTo
SetMapMode
GetStockObject
SelectObject
GetObjectW
CreateBitmap
Rectangle
CreateICW
CreateDCW
CreateFontIndirectW
GetClipBox
DPtoLP
MoveToEx
GetDeviceCaps
CreateSolidBrush
DeleteDC
CreateRoundRectRgn
advapi32
RegOpenKeyExW
SetSecurityDescriptorDacl
RegCloseKey
LookupPrivilegeValueW
StartServiceW
RegCreateKeyExW
RegNotifyChangeKeyValue
GetUserNameW
InitializeSecurityDescriptor
shell32
Shell_NotifyIconW
ole32
CoUninitialize
oleaut32
SysFreeString
OleLoadPicture
Sections
.text Size: 240KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE