Static task
static1
Behavioral task
behavioral1
Sample
8d98e1e929f32924f98d69cb2d37a420_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8d98e1e929f32924f98d69cb2d37a420_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d98e1e929f32924f98d69cb2d37a420_JaffaCakes118
-
Size
64KB
-
MD5
8d98e1e929f32924f98d69cb2d37a420
-
SHA1
256ba1629a95e720041e40c32dafa7be1c030e39
-
SHA256
b11977bd718d9c953f0af2bfb7ce2af45b317c5a3b9ff6e1427ea8269963a511
-
SHA512
26b34e43ff29a74c483f4d522dda2d5557fc13f1624a9f89c6e06e83deba1eb827b58e64c58945f725fbbca40db437cd081e44ad273b7b8593c0a84c76ca1c23
-
SSDEEP
1536:np/C036o1CNwFKjhgLEzBd+3idYaM3w+4kYqwl5:nhZsjCEzBisn/kYBl5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d98e1e929f32924f98d69cb2d37a420_JaffaCakes118
Files
-
8d98e1e929f32924f98d69cb2d37a420_JaffaCakes118.exe windows:4 windows x86 arch:x86
c911a42f0335bc15fcbb99bd71174102
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
CreateFileW
UnhandledExceptionFilter
QueryPerformanceCounter
InitializeCriticalSection
InitializeCriticalSection
GetTickCount
GetLastError
EnterCriticalSection
VirtualProtect
LoadLibraryA
DisableThreadLibraryCalls
VirtualProtect
InterlockedDecrement
DisableThreadLibraryCalls
CreateThread
CloseHandle
QueryPerformanceCounter
FreeLibrary
VirtualProtect
CreateEventW
LocalFree
CreateEventW
HeapDestroy
FreeLibrary
FreeLibrary
CreateEventW
GetCurrentThreadId
InterlockedCompareExchange
GetCurrentProcess
LocalAlloc
LoadLibraryA
GetModuleHandleA
InterlockedExchange
GetTickCount
GetTickCount
GetSystemTimeAsFileTime
lstrlenA
LoadLibraryW
GetProcAddress
InterlockedExchange
LocalAlloc
LeaveCriticalSection
GetCurrentProcess
MultiByteToWideChar
VirtualProtect
HeapFree
GetModuleFileNameW
QueryPerformanceCounter
DisableThreadLibraryCalls
GetVersionExA
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
InterlockedCompareExchange
EnterCriticalSection
LoadLibraryW
GetVersionExA
GetModuleHandleW
SetLastError
DeleteCriticalSection
CreateFileW
CloseHandle
LocalFree
VirtualAlloc
InitializeCriticalSection
LocalAlloc
VirtualProtect
GetModuleFileNameA
VirtualProtect
gdi32
CombineRgn
SetBrushOrgEx
Ellipse
SetTextColor
GetBkColor
GetPixel
MoveToEx
SetBkMode
SelectObject
CombineRgn
CreateBitmapIndirect
CreateSolidBrush
CreateBitmap
SetBrushOrgEx
PatBlt
CreateDIBitmap
CreateBitmap
SetWindowOrgEx
GetCurrentObject
SetWindowExtEx
SetBrushOrgEx
SetBkMode
GetCurrentObject
CreateSolidBrush
GetCurrentObject
CombineRgn
LineTo
GetCurrentObject
SelectObject
PatBlt
GetBrushOrgEx
GetPixel
PatBlt
LineTo
CreateBitmapIndirect
CreateDIBSection
StretchBlt
GetCurrentObject
CreateCompatibleDC
CreateBitmap
PatBlt
GetPixel
CreateBitmap
CreateBitmap
GetWindowExtEx
LineTo
RoundRect
Ellipse
GetBkMode
SetBrushOrgEx
CreateDIBitmap
GetPixel
CreateFontIndirectA
CreateRectRgn
MoveToEx
GetWindowOrgEx
CreateDIBitmap
SetBrushOrgEx
Rectangle
CreateFontA
SetBkMode
GetWindowExtEx
CreateRectRgn
user32
ShowWindow
IsWindow
EnableWindow
GetWindowRect
ShowWindow
DestroyWindow
SetWindowTextW
ReleaseDC
DialogBoxParamW
GetDC
PostQuitMessage
EnableWindow
LoadStringW
IsDlgButtonChecked
GetDlgItem
TranslateMessage
DialogBoxParamW
DefWindowProcW
PostMessageW
InvalidateRect
GetFocus
MessageBoxW
DispatchMessageW
SetFocus
CreateWindowExW
DialogBoxParamW
EndPaint
SendMessageW
LoadStringW
GetWindowRect
IsDlgButtonChecked
SendDlgItemMessageW
SetWindowTextW
PostQuitMessage
PeekMessageW
CharNextW
EndPaint
GetWindowRect
MessageBoxW
ShowWindow
PostQuitMessage
SendMessageW
TranslateMessage
CreateWindowExW
DialogBoxParamW
EndDialog
LoadStringW
IsWindow
InvalidateRect
SetTimer
PostQuitMessage
ReleaseDC
GetDesktopWindow
PostQuitMessage
InvalidateRect
DispatchMessageW
GetDC
IsDlgButtonChecked
GetDC
GetDlgItem
DispatchMessageW
CharNextW
ShowWindow
IsWindow
SetWindowLongW
GetDC
GetDesktopWindow
Sections
.text Size: 52KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ