Static task
static1
Behavioral task
behavioral1
Sample
a49d9debd1fe1e57960897546d6bc47d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a49d9debd1fe1e57960897546d6bc47d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a49d9debd1fe1e57960897546d6bc47d_JaffaCakes118
-
Size
357KB
-
MD5
a49d9debd1fe1e57960897546d6bc47d
-
SHA1
b9b804d08223e723d9b9407099e7e2a5a673aa3c
-
SHA256
c2bbcf303cbcb8f3bf343b6f4234013c22062943efd3fc7aa4847319a86529f7
-
SHA512
d83d91caea58660777163e329348f26c3f09258d4a41c07d212e3b64ffab68a1526b58fb02eeb2ecdf84d235cd3b35be576801b241419a46ce8597467c8762c1
-
SSDEEP
6144:qZNcdGtmjzVQwI+jEo/16+wqIr0iLlw78HbYPaH7vZwDTXLyZ7G7t0T918:g1mju6F1BwqIYiLlwSEPiLZs7yk7w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a49d9debd1fe1e57960897546d6bc47d_JaffaCakes118
Files
-
a49d9debd1fe1e57960897546d6bc47d_JaffaCakes118.exe windows:0 windows x86 arch:x86
952decaef2455099ed98768a23ec4788
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcmpW
VirtualFree
GetProcAddress
GetSystemTimeAsFileTime
lstrcpyW
GetStartupInfoW
GetFileSize
lstrcpynW
VirtualAlloc
MulDiv
GetCurrentProcessId
GetExitCodeThread
lstrcatW
lstrcmpiW
GetLastError
GetACP
RaiseException
GetThreadLocale
LocalAlloc
GlobalReAlloc
MultiByteToWideChar
GetModuleHandleW
LocalFree
GlobalAlloc
GetLocaleInfoW
IsDBCSLeadByte
InterlockedExchange
QueryPerformanceCounter
LoadLibraryA
GetFileAttributesW
GetCurrentThreadId
FileTimeToSystemTime
UnhandledExceptionFilter
HeapAlloc
CreateDirectoryW
TerminateProcess
SetUnhandledExceptionFilter
GlobalLock
InterlockedIncrement
SetErrorMode
CreateFileW
GetProcessHeaps
lstrlenW
HeapSize
GetModuleHandleA
GetDateFormatW
FindFirstFileW
CloseHandle
FileTimeToLocalFileTime
GetNumberFormatW
GetTempPathW
lstrlenA
GetCurrentProcess
GetFileTime
GetProcessHeap
InterlockedDecrement
LoadLibraryW
FindClose
GlobalUnlock
GetTickCount
GetTimeFormatW
FreeLibrary
GlobalFree
SetEndOfFile
GetTempFileNameW
user32
SendMessageA
RegisterClassExA
DestroyWindow
UpdateWindow
GetMessageA
TranslateMessage
ShowWindow
DefWindowProcA
DispatchMessageA
CreateWindowExA
msvcrt
_except_handler3
__p__commode
__argc
_XcptFilter
_wcmdln
wcscat
_adjust_fdiv
_ltow
__p__fmode
_exit
_cexit
_initterm
_itow
__set_app_type
wcscmp
_CxxThrowException
__dllonexit
_wtol
rand
__wargv
_controlfp
_wtoi
_wcsicmp
_onexit
__wgetmainargs
_getdcwd
_c_exit
wcschr
_wcsdup
free
_purecall
exit
_beginthreadex
__setusermatherr
wcstok
_wsplitpath
__CxxFrameHandler
gdi32
Rectangle
LPtoDP
RealizePalette
SetPixel
GetCurrentObject
GetPixel
SetBrushOrgEx
DeleteObject
Escape
CreatePatternBrush
Ellipse
GetObjectW
SetBkColor
BitBlt
PtVisible
Polyline
ExtTextOutW
GetDIBits
LineTo
CreateBitmap
PatBlt
CreateCompatibleBitmap
CreateSolidBrush
SelectPalette
CreateDCW
GetNearestColor
SetStretchBltMode
CreateHalftonePalette
CreateDIBitmap
CreatePen
EnumFontFamiliesW
GetDIBColorTable
GetNearestPaletteIndex
GetTextColor
SetDIBits
RectVisible
SetViewportExtEx
CreateDIBSection
MoveToEx
PlayMetaFile
TranslateCharsetInfo
GetBkMode
RestoreDC
SetMapMode
CreateRectRgnIndirect
StretchBlt
SetTextColor
SetBkMode
GetPaletteEntries
ExtFloodFill
UnrealizeObject
SetPaletteEntries
GetTextExtentPoint32W
PolyBezier
SetTextAlign
SaveDC
CreateICW
CreateFontIndirectW
SetROP2
Polygon
CreateCompatibleDC
GetDeviceCaps
StretchDIBits
FillRgn
ResizePalette
SetDIBitsToDevice
SelectObject
CreatePolygonRgn
TextOutW
SetDIBColorTable
EnumFontFamiliesExW
CreatePalette
RoundRect
OffsetRgn
GetStockObject
DeleteDC
Sections
.text Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ