Static task
static1
Behavioral task
behavioral1
Sample
a43667ae8a44208f434b2f9424764940_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a43667ae8a44208f434b2f9424764940_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a43667ae8a44208f434b2f9424764940_JaffaCakes118
-
Size
314KB
-
MD5
a43667ae8a44208f434b2f9424764940
-
SHA1
8630e399558d3628875b7edd31dcde93745483e7
-
SHA256
ab65dd8d851055cd6936beb8660ea0e7b2daf83b0af82388a7adb4868f504840
-
SHA512
fbac5a9341ba3c0ff4d0d989b701ecdbaf02974ae3fd0d7cb381da4b87a6402528970fa645f9945644e19eb25e47f40231816bbf5dedc7f807c80d542a1e67c5
-
SSDEEP
6144:oHchHf3U+7fptYbTz2eaFgbS3I5G2SA3K93kT6hxIBZEjGH2RhIOKU:UcFv17fIWrFgbSFd0TMaBEpRhp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a43667ae8a44208f434b2f9424764940_JaffaCakes118
Files
-
a43667ae8a44208f434b2f9424764940_JaffaCakes118.exe windows:4 windows x86 arch:x86
1e270adebaa8c74e601417aee91dc8d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
BitBlt
GetDeviceCaps
GetStockObject
CreateCompatibleDC
SelectObject
SetBkColor
CreateSolidBrush
kernel32
CreateProcessA
SizeofResource
GetVersion
GetModuleHandleW
GetACP
FindFirstFileA
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
UnmapViewOfFile
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
GetLastError
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GetProcAddress
DuplicateHandle
RemoveDirectoryA
FindNextFileA
CreateFileMappingA
ResetEvent
CompareStringA
GetDiskFreeSpaceA
FindNextFileW
CompareStringW
GetProcessHeap
GlobalLock
DeleteFileW
GetWindowsDirectoryA
DeleteFileA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
HeapCreate
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GetConsoleMode
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
ExpandEnvironmentStringsA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
FindResourceW
VirtualFree
Sleep
FindResourceA
VirtualAlloc
GetOEMCP
GetTickCount
advapi32
RegQueryValueExW
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyExW
RegCloseKey
RegSetValueExA
user32
EndDialog
SetWindowLongA
ReleaseCapture
GetWindowRect
GetSystemMetrics
KillTimer
BeginPaint
SetFocus
EndPaint
FillRect
SetTimer
GetWindowLongA
RegisterClassA
LoadStringA
SetWindowTextA
EnableWindow
ShowWindow
UpdateWindow
GetParent
GetMessageA
DestroyWindow
GetClientRect
TranslateMessage
GetDC
DispatchMessageA
IsWindow
SetWindowPos
LoadBitmapA
PostQuitMessage
CheckMenuItem
CreateWindowExA
wsprintfA
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
TrackPopupMenu
GetDesktopWindow
SetForegroundWindow
ReleaseDC
GetFocus
MessageBoxA
GetSysColor
SystemParametersInfoA
GetSubMenu
InvalidateRect
SendMessageA
IsWindowEnabled
SetCursor
oleaut32
SysStringLen
SysAllocString
msvcrt
_strcmpi
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
Sections
.text Size: 303KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ