Static task
static1
Behavioral task
behavioral1
Sample
acf230b90e0748b5417db5c4d7a08fb7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
acf230b90e0748b5417db5c4d7a08fb7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acf230b90e0748b5417db5c4d7a08fb7_JaffaCakes118
-
Size
156KB
-
MD5
acf230b90e0748b5417db5c4d7a08fb7
-
SHA1
9e861b2647394bb18f95e0a1268149a17f3d2f24
-
SHA256
16e6f7387b533b79ac2b066eda98f42552573c752076576fd5b57c31b33fb8a5
-
SHA512
ea39fabd64e3b05803014927961a7a5b1f5f130d32618249025f6f57049b24070cc6445cd24cd4745c29c28c2ea550c7b90f6e97be8451b4d89f5171253d289e
-
SSDEEP
3072:YaHYn48rne8jXCMy5RmWkysl92O0mNKUHtUzDNTsbPOMLAM5/V:H8nXyn5RnSl9v0i1tUz5obmMLn7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acf230b90e0748b5417db5c4d7a08fb7_JaffaCakes118
Files
-
acf230b90e0748b5417db5c4d7a08fb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
d552665451cbf260eb3f62b52178ed31
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
GetDeviceCaps
SetTextColor
DeleteObject
SelectObject
CreateFontIndirectW
CreateBrushIndirect
SetBkMode
SetBkColor
kernel32
GetSystemDirectoryW
GetCommandLineW
CreateThread
GetModuleHandleA
GetShortPathNameW
SearchPathW
WideCharToMultiByte
GetFileAttributesW
MulDiv
WriteConsoleInputVDMA
SetFileAttributesW
MultiByteToWideChar
CreateProcessW
lstrcmpiW
GlobalFree
FindClose
lstrcpyA
lstrcpynA
lstrcpyW
CompareFileTime
lstrlenA
FindNextFileW
GetVersionExW
SetFilePointer
GetProcessHandleCount
GetVersion
CopyFileW
GetPrivateProfileStringW
LoadLibraryA
GetDiskFreeSpaceW
GetWindowsDirectoryW
LoadLibraryExW
GetTempPathW
EnumResourceNamesA
WriteFile
GetLastError
GetFileSize
OpenProcess
lstrcpynW
FindFirstFileW
GetTickCount
ExitProcess
GlobalAlloc
SetCurrentDirectoryW
CreateDirectoryW
GetExitCodeProcess
MoveFileW
LoadLibraryW
DeleteFileW
Sleep
RemoveDirectoryW
CloseHandle
WritePrivateProfileStringW
CreateFileW
GetProcAddress
FreeEnvironmentStringsW
GetModuleHandleW
lstrcmpiA
lstrlenW
SetErrorMode
ReadFile
WaitForSingleObject
FreeLibrary
GlobalLock
ExpandEnvironmentStringsW
GetCurrentProcess
GlobalUnlock
GetTempFileNameW
lstrcmpW
GetModuleFileNameW
lstrcatW
GetFullPathNameW
SetFileTime
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ole32
OleUninitialize
CoCreateInstance
OleInitialize
CoTaskMemFree
advapi32
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumValueW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegEnumKeyW
shell32
SHGetPathFromIDListW
SHGetFileInfoW
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderLocation
SHBrowseForFolderW
user32
EndDialog
CheckDlgButton
GetSysColor
SetDlgItemTextW
SendMessageW
DialogBoxParamW
CloseClipboard
GetSystemMetrics
CharNextW
IsWindowVisible
ExitWindowsEx
FillRect
GetWindowModuleFileNameW
SetTimer
FindWindowExW
CallWindowProcW
DestroyWindow
AppendMenuW
MessageBoxIndirectW
LoadBitmapW
SetWindowLongW
GetMessagePos
GetClassInfoW
SetWindowTextW
SendMessageTimeoutW
LoadImageW
IsWindowEnabled
SetClassLongW
TrackPopupMenu
GetDlgItemTextW
CreateDialogParamW
IsWindow
DrawTextW
EnableWindow
DispatchMessageW
SetWindowPos
RegisterClassW
wsprintfW
CreateWindowExW
DefWindowProcW
GetDlgItem
BeginPaint
wsprintfA
CharUpperW
EnableMenuItem
GetSystemMenu
SetClipboardData
CreatePopupMenu
SetCursor
EndPaint
OpenClipboard
GetDC
CharPrevW
GetClientRect
SetForegroundWindow
PostQuitMessage
InvalidateRect
PeekMessageW
CharNextA
ShowWindow
LoadCursorW
EmptyClipboard
GetWindowRect
SystemParametersInfoW
ScreenToClient
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ