Static task
static1
Behavioral task
behavioral1
Sample
a73424e4d9f55244f318facdd7461d8b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a73424e4d9f55244f318facdd7461d8b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a73424e4d9f55244f318facdd7461d8b_JaffaCakes118
-
Size
181KB
-
MD5
a73424e4d9f55244f318facdd7461d8b
-
SHA1
0f5c961230cdc14a463637cf2d5d55c5320861e5
-
SHA256
43ad35ebc25a1f3adb1bfbd18a3661f8b1ce7e75510eb5e47f6a708fb5bb09ac
-
SHA512
2fb987cf04ac2037655956a5c1558a88ee700ac94319321c142a5cbc45acfe603d63b0bfed3f06c0f608836470f62c6eedba185bf5f7fb67021812ae0134136a
-
SSDEEP
3072:ln9856HqpiJawmfvZhYZ4z1sxtbjIUWnoRzQ:5W56MOZ4zytbLc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a73424e4d9f55244f318facdd7461d8b_JaffaCakes118
Files
-
a73424e4d9f55244f318facdd7461d8b_JaffaCakes118.exe windows:4 windows x86 arch:x86
606391586c4e51cf5cef5d845f346e6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
LocalAlloc
GetTempPathA
GetVersion
GetSystemDefaultLangID
GetModuleFileNameA
GetTempFileNameA
MulDiv
GetUserDefaultLangID
GlobalAlloc
GlobalLock
GlobalUnlock
lstrlenA
lstrcpyA
FreeEnvironmentStringsA
VirtualAlloc
VirtualFree
RtlUnwind
HeapDestroy
SetEndOfFile
HeapCreate
GetStdHandle
SetHandleCount
SetFilePointer
GetCurrentProcess
TerminateProcess
SetStdHandle
GetCommandLineA
GetStartupInfoA
ExitProcess
HeapAlloc
HeapFree
GetModuleHandleA
CreateFileA
GetFileType
WriteFile
CloseHandle
DeleteFileA
ReadFile
GetACP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
UnhandledExceptionFilter
GetOEMCP
GetProcAddress
LoadLibraryA
FlushFileBuffers
GetLastError
GlobalFree
user32
GetMessageA
EnableWindow
RegisterClassExA
CreateDialogParamA
IsDialogMessageA
EnableMenuItem
RegisterClassA
GetMenuItemID
GetMenuStringA
GetMenuItemCount
InsertMenuA
AppendMenuA
CreateMenu
DefFrameProcA
DefMDIChildProcA
DefDlgProcA
DefWindowProcA
UpdateWindow
PeekMessageA
SendMessageA
SetWindowTextA
DestroyWindow
ShowWindow
FindWindowA
CreateWindowExA
EmptyClipboard
GetWindowTextLengthA
GetWindowTextA
SetClipboardData
CloseClipboard
GetDlgItem
MessageBoxA
EndDialog
GetDesktopWindow
GetDC
ReleaseDC
SendDlgItemMessageA
GetDlgItemTextA
SetDlgItemTextA
TranslateMessage
DispatchMessageA
FillRect
DrawTextA
FrameRect
SetForegroundWindow
BringWindowToTop
LoadStringA
IsWindow
GetClipboardData
DialogBoxParamA
SetFocus
LoadCursorA
OpenClipboard
IsWindowVisible
GetForegroundWindow
GetMenu
LoadMenuA
IsIconic
SetWindowPos
TrackPopupMenu
GetSubMenu
GetWindowRect
BeginPaint
DestroyMenu
ModifyMenuA
WinHelpA
LoadBitmapA
EndPaint
SetTimer
KillTimer
PostQuitMessage
LoadIconA
MoveWindow
GetDialogBaseUnits
GetWindowLongA
SetClassLongA
LoadImageA
SetWindowLongA
GetClientRect
GetSystemMetrics
GetSystemMenu
gdi32
SetAbortProc
CreateFontA
StartPage
DeleteObject
DeleteDC
GetDeviceCaps
StretchBlt
CreateCompatibleDC
SelectObject
CreateSolidBrush
BitBlt
GetStockObject
SetBkColor
SetTextColor
SetBkMode
StartDocA
AbortDoc
EndDoc
EndPage
CreateCompatibleBitmap
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
comdlg32
PrintDlgA
ole32
OleUninitialize
CoGetClassObject
CLSIDFromProgID
OleInitialize
oleaut32
VariantChangeType
VariantClear
SysAllocString
VariantInit
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ