Static task
static1
Behavioral task
behavioral1
Sample
942e26db2b2cfc075176da735c768e9d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
942e26db2b2cfc075176da735c768e9d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
942e26db2b2cfc075176da735c768e9d_JaffaCakes118
-
Size
157KB
-
MD5
942e26db2b2cfc075176da735c768e9d
-
SHA1
021e62debba6825ab331c3419bb80b6f22f5c686
-
SHA256
19322b4cb225625b283444c684847748cbee46a0286d0f3afbd39c30572fda29
-
SHA512
e144239e1807dacc60e138fc43dc9afc4690a1c72a1112e9702e1fa8372cd90f1665176f0557ed3454239e88443fb8272af7fe82c0b1c377c028114b4ba0516e
-
SSDEEP
3072:vqid+1nDQT+r2WCPhp2hkdxdcTQHXL4xR:evva76kdxkQ30R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 942e26db2b2cfc075176da735c768e9d_JaffaCakes118
Files
-
942e26db2b2cfc075176da735c768e9d_JaffaCakes118.exe windows:1 windows x86 arch:x86
56f5243955e2bbe6b2e551ba33f23898
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_wmakepath
_mbcjmstojis
_ismbcsymbol
_open
_ismbbalnum
_environ
gmtime
_mbsnextc
_lsearch
__p__commode
__p__fmode
_XcptFilter
_mbccpy
_seterrormode
_clearfp
_snwscanf
_wenviron
_flsbuf
_except_handler3
fgetws
atan
_fgetwchar
_initterm
tan
strlen
_mbsnbset
_endthreadex
_adjust_fdiv
_utime
_utime64
_pgmptr
_ismbchira
_aligned_offset_malloc
_cexit
_acmdln
_wctime
_ungetch
_write
exit
iswalnum
_wasctime
_mbsicoll
_mbsinc
_expand
_wspawnvp
__set_app_type
_mbsspn
_pclose
_lseek
_gcvt
isalnum
wcsncmp
__setusermatherr
_wstati64
_strset
__getmainargs
sin
_dup
rewind
_isatty
_inpw
_commit
_strlwr
_adj_fprem1
sprintf
_controlfp
_set_sbh_threshold
raise
_filelength
_mbsnbcat
_filbuf
fprintf
_endthread
_exit
_cputs
longjmp
_getws
_cprintf
labs
memcpy
_wexecvpe
_execv
_ismbclegal
memmove
floor
_wfopen
iswascii
_fpreset
_execlpe
_lrotr
_chgsign
fwrite
_tempnam
_pwctype
_setsystime
wcstoul
_ungetwch
_wexecl
kernel32
GetStdHandle
FindClose
TerminateThread
CreateEventA
lstrcatA
GetVersion
FormatMessageA
EnterCriticalSection
GetCommandLineW
SetProcessWorkingSetSize
GetStringTypeA
GetCommandLineA
GetEnvironmentVariableA
DeleteFileA
ExitProcess
LCMapStringA
TlsSetValue
SetFilePointer
GetConsoleMode
GetVersionExA
GetExitCodeThread
ReadFile
SetPriorityClass
FindFirstFileA
TlsGetValue
GetFileAttributesA
GetThreadContext
GetCurrentProcess
GetLastError
GlobalLock
IsValidCodePage
GetFileTime
IsDebuggerPresent
GetTickCount
UnhandledExceptionFilter
GetNumberFormatA
GetSystemDirectoryA
lstrcmpiA
HeapCreate
CreateFileA
GetConsoleCP
lstrcmpA
GetOEMCP
SetHandleCount
SetLastError
OpenEventA
GetSystemTimeAsFileTime
FileTimeToSystemTime
LocalFree
InitializeCriticalSection
GetDriveTypeA
CreateThread
GetModuleHandleA
WriteConsoleW
GetProcAddress
GetStartupInfoA
GetCurrentDirectoryA
GlobalMemoryStatus
CloseHandle
TlsAlloc
MulDiv
GetProcessWorkingSetSize
WideCharToMultiByte
FreeLibrary
GetSystemInfo
GlobalAlloc
ResetEvent
GetLocaleInfoA
user32
ScrollWindowEx
GetDoubleClickTime
ReleaseCapture
EnumWindows
SetCapture
GetUserObjectSecurity
TrackPopupMenuEx
GetFocus
DrawFrameControl
DefDlgProcA
EndPaint
LoadImageA
PeekMessageA
LoadMenuA
SetClassLongA
TrackPopupMenu
GetClassNameA
RegisterWindowMessageA
GetWindowTextA
EnableMenuItem
SetUserObjectSecurity
ShowWindow
CheckRadioButton
DefFrameProcA
CheckMenuItem
DrawIconEx
DestroyWindow
ExitWindowsEx
MoveWindow
GetDlgItemTextA
GetMenu
PostQuitMessage
DispatchMessageA
GetClientRect
GetMessageA
SetPropA
InvalidateRgn
MsgWaitForMultipleObjects
FindWindowExA
BeginDeferWindowPos
GetUpdateRgn
BeginPaint
IsIconic
GetSysColor
DestroyIcon
CloseClipboard
FindWindowA
KillTimer
SetScrollInfo
InvalidateRect
GetClassLongA
SetTimer
SetCursor
CreateDialogParamA
GetParent
SystemParametersInfoA
SetMenuItemInfoA
RedrawWindow
EmptyClipboard
SetDlgItemTextA
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 137B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ