Static task
static1
Behavioral task
behavioral1
Sample
945230fa585297cc4333523a49f0ae01_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
945230fa585297cc4333523a49f0ae01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
945230fa585297cc4333523a49f0ae01_JaffaCakes118
-
Size
773KB
-
MD5
945230fa585297cc4333523a49f0ae01
-
SHA1
fbfc63ed827661c07d95835a21eb78baee925d3b
-
SHA256
0181b98e9d672a4ac2a2478cc2ca8c833be6c6c26c3c6e0ba18233b17d4497f2
-
SHA512
9ff7ee1cd6eb52b979b4d4c86d7473d1847dc05c758b6c15c78f9b89d208931a9dd6b86613431507465cddf603a0b7c4176904a4b42c8d7133e4cc0776492969
-
SSDEEP
12288:kzEeuwVo0qt9lZDyEPOEYF9kC1JdUw6cFJGb4:kzEer8tLZDZOEYFpZQcFUb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 945230fa585297cc4333523a49f0ae01_JaffaCakes118
Files
-
945230fa585297cc4333523a49f0ae01_JaffaCakes118.exe windows:4 windows x86 arch:x86
3b68351d963d03a7f420e05d3b3ea9b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
memmove
fabs
acos
asin
atan
atan2
ceil
cos
cosh
exp
floor
fmod
log
log10
modf
pow
sin
sinh
sqrt
tan
tanh
realloc
free
strstr
strlen
strcmp
strncmp
sscanf
malloc
calloc
memset
memcpy
strchr
strcpy
strcat
_findfirst
_errno
_findclose
_findnext
rand
abs
_access
strrchr
strpbrk
strncpy
_getcwd
_chdir
sprintf
system
time
srand
_stat
_assert
strcspn
strtoul
strspn
qsort
memcmp
wcscmp
wcscpy
_vsnprintf
fread
fseek
fgetc
ungetc
feof
ferror
fopen
fclose
ftell
ldexp
strtol
fwrite
frexp
strtod
_hypot
vsprintf
toupper
tolower
vprintf
exit
fprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
_XcptFilter
_exit
_except_handler3
kernel32
QueryPerformanceFrequency
QueryPerformanceCounter
timeEndPeriod
timeBeginPeriod
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FormatMessageW
VerSetConditionMask
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetThreadExecutionState
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
user32
CreateWindowExW
ShowWindow
RegisterDeviceNotificationW
PeekMessageW
TranslateMessage
DispatchMessageW
MapVirtualKeyW
ToUnicode
SystemParametersInfoW
UnregisterDeviceNotification
DestroyWindow
GetRawInputDeviceList
GetRawInputDeviceInfoA
GetMonitorInfoW
EnumDisplaySettingsW
EnumDisplayMonitors
EnumDisplayDevicesW
ChangeDisplaySettingsExW
GetDC
ReleaseDC
EnumDisplaySettingsExW
CreateIconIndirect
AdjustWindowRectEx
SetCursor
LoadCursorW
GetClientRect
ClientToScreen
ClipCursor
RegisterRawInputDevices
GetCursorPos
WindowFromPoint
PtInRect
GetWindowLongW
SetWindowLongW
SetWindowPos
GetKeyState
GetPropW
DefWindowProcW
GetMessageTime
SetCapture
ReleaseCapture
TrackMouseEvent
GetRawInputData
MonitorFromWindow
SetPropW
GetWindowPlacement
SetWindowPlacement
LoadImageW
RegisterClassExW
UnregisterClassW
RemovePropW
DestroyIcon
SetWindowTextW
GetSystemMetrics
GetClassLongW
SendMessageW
GetWindowRect
MoveWindow
SetRect
FlashWindow
BringWindowToTop
SetForegroundWindow
SetFocus
GetActiveWindow
IsIconic
IsWindowVisible
IsZoomed
GetLayeredWindowAttributes
SetLayeredWindowAttributes
WaitMessage
MsgWaitForMultipleObjects
PostMessageW
ScreenToClient
SetCursorPos
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetClipboardData
gdi32
CreateDCW
GetDeviceCaps
DeleteDC
GetDeviceGammaRamp
SetDeviceGammaRamp
CreateDIBSection
CreateBitmap
DeleteObject
CreateRectRgn
DescribePixelFormat
SwapBuffers
ChoosePixelFormat
SetPixelFormat
shell32
DragQueryFileW
DragQueryPoint
DragFinish
DragAcceptFiles
Sections
.text Size: 543KB - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 219KB - Virtual size: 224KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ