Static task
static1
Behavioral task
behavioral1
Sample
a438d1f48b2c7db0185d3005daa4b7dc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a438d1f48b2c7db0185d3005daa4b7dc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a438d1f48b2c7db0185d3005daa4b7dc_JaffaCakes118
-
Size
183KB
-
MD5
a438d1f48b2c7db0185d3005daa4b7dc
-
SHA1
1403bd473aa8f3d6f871eb6d9e144d1d60a02046
-
SHA256
91c266fc87be58aa6dd0aaa2c248ae533d085ea29df29fadb999cd9557d0c98c
-
SHA512
b2ae1cf7937165d3b8ab2795cc742341845ed1b4a966379d5390013d2c761d8c56768275f8a5cff600a384cced264808caa12cc906a08bc83ad57e34f06e6c1d
-
SSDEEP
3072:7GgGnb3lR5ytGZCS6xA4aYgeF6PjWl/kk:CrCS6xAJrWCk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a438d1f48b2c7db0185d3005daa4b7dc_JaffaCakes118
Files
-
a438d1f48b2c7db0185d3005daa4b7dc_JaffaCakes118.exe windows:4 windows x86 arch:x86
b4973a86f1dc54deac0bcca565e1f7af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerLanguageNameA
kernel32
GetModuleHandleA
GetSystemInfo
GetVersionExA
DeleteFileA
GetModuleFileNameA
GetWindowsDirectoryA
WriteFile
GetDiskFreeSpaceA
WritePrivateProfileStringA
FindClose
FindFirstFileA
IsDBCSLeadByte
SetFilePointer
ReadFile
GetPrivateProfileIntA
GetLastError
GetTickCount
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
FindResourceA
GlobalHandle
GetUserDefaultLCID
LoadLibraryA
GetProfileStringA
SetErrorMode
GetFileSize
FreeLibrary
CreateFileA
GlobalLock
GlobalAlloc
CloseHandle
GlobalFree
_hread
GlobalUnlock
CreateDirectoryA
lstrlenA
lstrcpyA
WinExec
GetDriveTypeA
SetStdHandle
VirtualAlloc
LCMapStringW
GetProcAddress
HeapFree
HeapAlloc
LCMapStringA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetStringTypeA
RtlUnwind
GetStringTypeW
HeapCreate
HeapReAlloc
VirtualFree
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
HeapDestroy
ExitProcess
user32
DestroyWindow
EndDialog
DrawIcon
GetWindowPlacement
GetDlgItem
DialogBoxParamA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
LoadIconA
SetWindowTextA
InflateRect
SendMessageA
SetWindowLongA
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
InvalidateRect
LoadCursorA
GetClassInfoA
RegisterClassA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
DrawTextA
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetSystemMetrics
CharNextA
GetParent
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
SetRect
MoveWindow
GetSysColor
PostQuitMessage
CreateWindowExA
gdi32
RestoreDC
SelectObject
DeleteObject
GetObjectA
SaveDC
CreateFontIndirectA
MoveToEx
CreatePen
LineTo
SetBkColor
SetTextColor
ExtTextOutA
CreateSolidBrush
CreateDIBitmap
GetTextMetricsA
SelectPalette
GetDeviceCaps
RealizePalette
GetSystemPaletteEntries
UnrealizeObject
CreatePalette
BitBlt
CreateCompatibleDC
DeleteDC
CreateRectRgn
GetStockObject
SelectClipRgn
GetTextExtentPointA
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE