Static task
static1
Behavioral task
behavioral1
Sample
a7d813beba84901617848a5c9e87e6d3_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a7d813beba84901617848a5c9e87e6d3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7d813beba84901617848a5c9e87e6d3_JaffaCakes118
-
Size
30KB
-
MD5
a7d813beba84901617848a5c9e87e6d3
-
SHA1
126c35d171a54906b4a395b9c8d78166164ec7ab
-
SHA256
c3089357c16b6b65134113688dcc4607c850250634d66d52424a12ce5194c5c8
-
SHA512
32d0378a981af69bfed6a34aa827cdd4326ac71bd34287f33190d9fffa8e2fa1271f09233d4aa8494a359911309eb0635d754cb802637225277533b59d01f814
-
SSDEEP
384:k7o6KiEgMFg/Pkp7CdmvPxVUykj9jGwuXyLbyL3BIb+RJCadXTHJGHhyQQId1/V0:k7FzELs2C+P0y8iw4F/XTHJYdQId1Pe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7d813beba84901617848a5c9e87e6d3_JaffaCakes118
Files
-
a7d813beba84901617848a5c9e87e6d3_JaffaCakes118.exe windows:4 windows x86 arch:x86
ebe4d9f75c6d61be451d871743e5c57c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetVersionExA
LocalFree
GetModuleHandleA
GetProcAddress
HeapAlloc
GetModuleHandleA
GetLastError
InitializeCriticalSection
HeapReAlloc
SetFilePointer
UnhandledExceptionFilter
LoadLibraryW
GetCurrentProcessId
CreateThread
CreateFileW
HeapAlloc
lstrlenW
GetStartupInfoW
CreateFileW
CreateFileW
CreateFileW
GetProcessHeap
CloseHandle
ReadFile
InterlockedIncrement
GetCurrentProcess
GetStartupInfoA
Sleep
GetSystemTimeAsFileTime
GetModuleHandleA
GetModuleHandleW
Sleep
LoadLibraryW
lstrcpyW
lstrlenW
LeaveCriticalSection
GetStartupInfoA
GetModuleHandleW
HeapReAlloc
GetCommandLineA
InitializeCriticalSection
GetCurrentProcessId
ExitProcess
GetLastError
GetACP
GetVersionExA
GetACP
HeapReAlloc
CreateFileW
VirtualAlloc
GetVersionExA
SetUnhandledExceptionFilter
TerminateProcess
VirtualAlloc
WaitForSingleObject
CreateThread
MultiByteToWideChar
InterlockedDecrement
LoadLibraryW
GetStartupInfoA
GetLastError
lstrlenW
GetCurrentThreadId
QueryPerformanceCounter
HeapFree
GetModuleFileNameA
SetFilePointer
CreateFileW
WriteFile
lstrcmpiW
ExitProcess
gdi32
SaveDC
BitBlt
ExtTextOutW
BitBlt
GetObjectW
CreateFontIndirectW
GetTextExtentPoint32W
GetStockObject
DeleteObject
TextOutW
MoveToEx
ExtTextOutW
DeleteObject
CreatePen
CreateCompatibleBitmap
CreatePatternBrush
CreatePatternBrush
SetWindowExtEx
CreatePatternBrush
CreateBitmap
CreateBitmap
PatBlt
SetTextAlign
SetStretchBltMode
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetTextExtentPointW
BitBlt
MoveToEx
SetWindowExtEx
GetObjectA
SetMapMode
SetBkColor
LineTo
TranslateCharsetInfo
LineTo
RestoreDC
CreateFontIndirectW
CreatePen
SetTextAlign
RealizePalette
SelectPalette
LineTo
DeleteObject
MoveToEx
SetStretchBltMode
CreateCompatibleDC
DeleteObject
CreateRectRgn
CreateCompatibleDC
TranslateCharsetInfo
StretchBlt
DeleteObject
GetObjectA
GetObjectW
Rectangle
GetObjectW
GetTextExtentPoint32W
CreateSolidBrush
Rectangle
CreatePen
SetBkColor
GetStockObject
GetTextMetricsW
DeleteObject
StretchBlt
SetBkMode
GetTextExtentPoint32W
GetTextExtentPoint32W
GetTextExtentPoint32W
DeleteObject
RealizePalette
RestoreDC
user32
EndPaint
GetMenu
GetWindowPlacement
SetDlgItemTextW
SetCapture
SetDlgItemTextA
CopyRect
LoadIconW
DestroyMenu
InflateRect
CheckRadioButton
SetCursor
GetFocus
IsClipboardFormatAvailable
SetCapture
BeginPaint
GetWindowLongA
IsWindowVisible
BeginPaint
GetSysColor
TranslateMessage
DestroyIcon
TranslateMessage
FindWindowW
IsWindowEnabled
OpenInputDesktop
MoveWindow
MessageBeep
RegisterClassExW
IsClipboardFormatAvailable
ClientToScreen
IsWindowVisible
CheckDlgButton
IsWindowEnabled
RegisterClassExW
SetWindowTextW
CloseWindowStation
SendDlgItemMessageW
SetDlgItemTextA
PeekMessageA
SetFocus
DrawFocusRect
GetDlgItem
GetWindowTextLengthW
SendDlgItemMessageA
EqualRect
RegisterClassA
GetCursorPos
IsWindow
CloseClipboard
GetDlgItemTextW
GetSubMenu
SetWindowLongA
MoveWindow
WinHelpW
GetDesktopWindow
DefWindowProcA
GetDlgItem
MessageBoxW
InflateRect
BeginPaint
GetMenu
CharNextA
EnumWindows
SendDlgItemMessageW
SetWindowLongW
PeekMessageW
CharUpperW
TranslateMessage
DrawIconEx
Sections
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ