Static task
static1
Behavioral task
behavioral1
Sample
acd63d68608535cea95854a3ec593caf_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
acd63d68608535cea95854a3ec593caf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acd63d68608535cea95854a3ec593caf_JaffaCakes118
-
Size
224KB
-
MD5
acd63d68608535cea95854a3ec593caf
-
SHA1
4105d74ef50f8ead8f8a92f257acc18cffee0226
-
SHA256
90128efa28020d12585a95e0ee70505095a37ca4bfe9a849da5a6dd7dfb1b964
-
SHA512
03bf8ea584be726bc0259bd96cdc60e3ee4ad374c30742da42dc106468e69c5e25319c83155bf89e1315d9d887d284b8acf8697535041dbfc0d0a84d5d98e8b4
-
SSDEEP
3072:KtVXistNmb11R8WFf7axCv9O8moOLSyUa8P4+bQrLboRlar3c0CLXesQKqbQvn:KtVyQmR1RTVuUa8P4GQj2larsrOsEbQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acd63d68608535cea95854a3ec593caf_JaffaCakes118
Files
-
acd63d68608535cea95854a3ec593caf_JaffaCakes118.exe windows:4 windows x86 arch:x86
54118b85c73c4af71d77664ff7e12f45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
GlobalFlags
GetCPInfo
GetOEMCP
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
ExitProcess
TerminateProcess
SetStdHandle
GetFileType
RaiseException
HeapSize
GetTimeZoneInformation
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStartupInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
Sleep
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetLastError
lstrcatA
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcmpiA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrlenA
InterlockedExchange
MultiByteToWideChar
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
GetLastError
GetCurrentThreadId
GetCommandLineA
GetSystemDirectoryA
CreateDirectoryA
DeleteFileA
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryExA
FreeLibrary
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpyA
WriteFile
CreateFileA
ReadFile
CloseHandle
VirtualAlloc
SetFilePointer
user32
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
LoadStringA
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
EnableWindow
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
GetClientRect
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GetSystemMetrics
CharUpperA
DispatchMessageA
SendMessageA
GetKeyState
CallNextHookEx
PeekMessageA
ReleaseDC
GetDC
CopyRect
RegisterClassA
SetWindowsHookExA
MessageBoxA
SetWindowPos
gdi32
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
SelectObject
DeleteDC
DeleteObject
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
comctl32
ord17
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ