Static task
static1
Behavioral task
behavioral1
Sample
9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118
-
Size
52KB
-
MD5
9560083d64591bb85d3cf9ee9915c70b
-
SHA1
12862799cf13a35f723c58226a0ca2f6fe1cb23f
-
SHA256
16d7aa809ea12cf706f8f4ebbbd2f20b22d8bf4f505cbf15038639e955edfd89
-
SHA512
a296bb081384c9ab51809fbfed460add52ec79a10a17750def750387de983b1b3a59063208739b452f1e469d69e6ec901c3d9100343180953911a4c07e4dedab
-
SSDEEP
768:7US0FqfJ55Cr0KuNRwFpVTcsraLOxt1QQC5O5wT212u:QFE558uNmfRjaQDr2u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118
Files
-
9560083d64591bb85d3cf9ee9915c70b_JaffaCakes118.exe windows:4 windows x86 arch:x86
4ac64f285d6af9c30abc1137a6c1e5f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
CreateDirectoryA
MultiByteToWideChar
Sleep
GetVersionExA
FormatMessageA
ExpandEnvironmentStringsA
lstrcmpA
GetWindowsDirectoryA
lstrcpyA
lstrcatA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary
CreateFileA
GetFileTime
CloseHandle
CompareFileTime
FindFirstFileA
FindNextFileA
FindClose
GetDriveTypeA
SetCurrentDirectoryA
lstrlenA
SetFileAttributesA
GetLastError
GetCurrentProcessId
LocalFree
lstrcmpiA
GetStartupInfoA
user32
SetTimer
DialogBoxParamA
EndDialog
SendDlgItemMessageA
LoadCursorA
SetCursor
WindowFromPoint
GetWindowThreadProcessId
GetClientRect
UpdateWindow
GetWindowDC
GetSysColor
InflateRect
InvalidateRect
IsWindowVisible
ScreenToClient
SetForegroundWindow
EnumChildWindows
GetClassNameA
GetWindowLongA
CheckDlgButton
IsDlgButtonChecked
SetDlgItemTextA
GetWindowTextA
GetParent
PostMessageA
GetDlgItemTextA
wsprintfA
MessageBoxA
SendMessageA
PtInRect
GetDesktopWindow
DrawTextA
CharLowerA
MapWindowPoints
ReleaseDC
EndPaint
SetWindowLongA
LoadIconA
DestroyWindow
ShowWindow
RegisterClassExA
GetSystemMetrics
GetMessageA
FindWindowA
DispatchMessageA
SetWindowPos
PostQuitMessage
GetSystemMenu
AppendMenuA
GetWindowRect
EnableWindow
GetCursorPos
IsWindow
MoveWindow
KillTimer
GetDlgItem
CreateDialogParamA
CreateWindowExA
BeginPaint
DefWindowProcA
TranslateMessage
gdi32
SetPixel
DeleteObject
GetPixel
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
TextOutA
SetTextColor
LineTo
MoveToEx
CreatePen
SetBkMode
CreateFontIndirectA
GetStockObject
GetObjectA
DeleteDC
GetTextExtentPoint32A
advapi32
RegEnumValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyA
shell32
ShellExecuteA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ole32
CoInitialize
CoUninitialize
CoCreateInstance
comctl32
PropertySheetA
msvcrt
_controlfp
__set_app_type
__p__fmode
_except_handler3
_adjust_fdiv
__setusermatherr
__p__commode
__getmainargs
_acmdln
_initterm
_XcptFilter
_exit
exit
atoi
_ftol
strcpy
__p___argv
strlen
_stricmp
_strnicmp
memset
Sections
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ