Static task
static1
Behavioral task
behavioral1
Sample
961a153f7acf81d17a5d674c464ee878_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
961a153f7acf81d17a5d674c464ee878_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
961a153f7acf81d17a5d674c464ee878_JaffaCakes118
-
Size
78KB
-
MD5
961a153f7acf81d17a5d674c464ee878
-
SHA1
f2f8ab5de04090672bcf67bfde745c063e5107e0
-
SHA256
d32eb14bf917e57c9c521f3e8a29c5c4150e94ced27172949e6425a87fe3e216
-
SHA512
f073284fc8bc57afe88581f36c0718e6e93fa890d97fbf7622e38adcadd926507e1136c2604d8d4fd7cb7b0d823ea6d15610cea3bab342aa22914d3f4035bc74
-
SSDEEP
1536:SeeJhFPfAruETStfGc9hxVbEygN/lytCBfN+rJLQpwIkl+:Zi5QSZVEN/lDBQvIkM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 961a153f7acf81d17a5d674c464ee878_JaffaCakes118
Files
-
961a153f7acf81d17a5d674c464ee878_JaffaCakes118.exe windows:4 windows x86 arch:x86
bbe7225f5e352fcbc8a3f463523afad9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
lstrcatW
GlobalFree
GetEnvironmentStringsW
WaitForSingleObject
OpenEventW
WaitForMultipleObjects
TerminateProcess
GetTimeZoneInformation
FileTimeToSystemTime
GetLastError
LocalAlloc
TlsAlloc
Sleep
DeleteCriticalSection
MultiByteToWideChar
GetCurrentDirectoryA
GetModuleHandleW
HeapSize
LocalFree
FindClose
VirtualAlloc
GetProcAddress
LoadLibraryA
GetSystemInfo
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetStdHandle
SetFilePointer
ReadFile
SetEndOfFile
GetLocaleInfoA
VirtualProtect
VirtualQuery
InterlockedExchange
RtlUnwind
IsBadWritePtr
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
CreateFileA
CloseHandle
GetStringTypeW
GetStringTypeA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
FlushFileBuffers
user32
GetDlgCtrlID
CreateWindowExW
ModifyMenuW
GetDC
CheckMenuItem
CheckMenuRadioItem
GetScrollRange
MapWindowPoints
GetActiveWindow
GetCursorPos
UpdateWindow
CloseClipboard
RegisterClassExW
GetWindowLongW
LoadMenuW
RealChildWindowFromPoint
GetClassNameW
SetParent
DrawIcon
GetClientRect
SetWindowPlacement
GetMessageA
SetScrollPos
GetMessageW
GetMenu
DrawFrameControl
CreatePopupMenu
IsClipboardFormatAvailable
DestroyCursor
GetSubMenu
SetWindowsHookExW
GetKeyState
DispatchMessageW
SetCaretPos
ShowCaret
CallWindowProcA
PostMessageW
SetClipboardData
GetMenuStringW
BeginDeferWindowPos
GetKeyboardState
EndPaint
CreateDialogIndirectParamW
DrawFocusRect
mouse_event
DrawTextW
SetDlgItemInt
FillRect
UnhookWindowsHookEx
AppendMenuW
IsWindow
IsDialogMessageW
DeferWindowPos
wsprintfW
ReleaseDC
GetMenuState
SetCursor
EmptyClipboard
GetDlgItemTextW
InflateRect
IsZoomed
TranslateMessage
ScreenToClient
InvalidateRect
IsIconic
LoadIconW
RegisterClassW
InsertMenuW
comdlg32
GetOpenFileNameA
PageSetupDlgW
ChooseFontW
ChooseColorW
FindTextA
ChooseColorA
ChooseFontA
PageSetupDlgA
GetFileTitleA
GetOpenFileNameW
GetFileTitleW
ReplaceTextA
ReplaceTextW
FindTextW
PrintDlgW
GetSaveFileNameA
PrintDlgA
ole32
StgIsStorageILockBytes
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 323KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ