Static task
static1
Behavioral task
behavioral1
Sample
945c2b1434db80159aa5e9597ca7cd21_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
945c2b1434db80159aa5e9597ca7cd21_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
945c2b1434db80159aa5e9597ca7cd21_JaffaCakes118
-
Size
368KB
-
MD5
945c2b1434db80159aa5e9597ca7cd21
-
SHA1
bb7e427a7b5e2a785717222e065cf841971e332b
-
SHA256
cd043b2a9c424e7ffcddf4202f5d67272bb1ad6298d1d0147d78f22bf29e3268
-
SHA512
b9b10c3d039a966fc7cedd4963837ae702258b0f45f5daa108f872f596ddebd878b12fd4aef3bf23737798f58df6b37ae5656be84aac892f8d10d6256a8ab335
-
SSDEEP
6144:JEG94Rw8f8fqgStjqvADVxUehEKlLMZoS5bIrJoDi0g3a/ogdeMB8+gQ6SbVer4D:+w8lgSOADVPhEYaoobKJoDiZK/og/86B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 945c2b1434db80159aa5e9597ca7cd21_JaffaCakes118
Files
-
945c2b1434db80159aa5e9597ca7cd21_JaffaCakes118.exe windows:4 windows x86 arch:x86
4cc5f57482cff05150a3dcd64b725fd4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetDeviceCaps
DeleteDC
GetStockObject
CreateCompatibleDC
SelectObject
SetBkColor
DeleteObject
CreateSolidBrush
ole32
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitialize
kernel32
FindResourceA
Sleep
VirtualFree
FindResourceW
UnmapViewOfFile
IsValidCodePage
CreateProcessA
SizeofResource
InterlockedExchange
GetCurrentThreadId
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
FindFirstFileA
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
HeapSize
WideCharToMultiByte
GetCommandLineW
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
HeapCreate
GetLastError
InterlockedIncrement
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
WaitForMultipleObjects
RemoveDirectoryA
FindFirstFileW
CreateFileMappingA
ResetEvent
CompareStringA
FindNextFileW
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
DeleteFileA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
VirtualAlloc
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetVersion
SetEndOfFile
GetConsoleMode
GlobalAlloc
WriteConsoleA
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
CreateFileA
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
GlobalLock
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetCommandLineA
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
LoadLibraryW
GetCPInfo
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
LoadLibraryExW
ExpandEnvironmentStringsA
LocalAlloc
GetLocaleInfoA
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
LockResource
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetOEMCP
FlushFileBuffers
advapi32
RegDeleteValueA
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyA
user32
SetWindowLongA
SetWindowPos
IsWindow
DispatchMessageA
GetDC
SetCursor
CallWindowProcA
InvalidateRect
DrawTextA
IsWindowVisible
GetSysColor
GetFocus
MessageBoxA
MoveWindow
ReleaseDC
SetForegroundWindow
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ScreenToClient
GetDlgItem
SetTimer
GetSubMenu
CheckMenuItem
SetWindowTextA
EndDialog
PostMessageA
IsIconic
GetWindowRect
GetSystemMetrics
DefWindowProcA
SetFocus
FillRect
CreateWindowExA
GetWindowLongA
RegisterClassA
EnableMenuItem
LoadStringA
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
DestroyWindow
GetClientRect
SendMessageA
GetCursorPos
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 346KB - Virtual size: 346KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ