Static task
static1
Behavioral task
behavioral1
Sample
a8e01d9d08383968f7b9eea766fdb9f2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a8e01d9d08383968f7b9eea766fdb9f2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8e01d9d08383968f7b9eea766fdb9f2_JaffaCakes118
-
Size
142KB
-
MD5
a8e01d9d08383968f7b9eea766fdb9f2
-
SHA1
e5b3d689e7a4caffb0722fe26a4f180a3406172d
-
SHA256
f1e22e925134a727804e94c0cbf41e8480dddbddf15a21a5da1300a67248b3af
-
SHA512
b74d03136781ba1e3628ff38e6fe51dfe2030c0559226569163085c61812c459a76f698382b2635d8ef4b03d0a42938ebbc3cc38b8f7c3bc2ce9fcb5fa5b9016
-
SSDEEP
3072:9Ilo9rFPzpKCICLGKarxq3mxsG1SAHkASsuuagn12Ht:jrF7pnIEPoUmDBHkASsu5g12
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8e01d9d08383968f7b9eea766fdb9f2_JaffaCakes118
Files
-
a8e01d9d08383968f7b9eea766fdb9f2_JaffaCakes118.exe windows:5 windows x86 arch:x86
cceca797c8a09e7c255de300acace314
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSysColorBrush
GetComboBoxInfo
FillRect
DestroyCaret
SetClassLongA
GetMenuStringA
RegisterClassW
IsCharAlphaNumericA
DrawFocusRect
GetWindowDC
MessageBoxA
GetSysColor
ReuseDDElParam
GetDCEx
UnregisterClassA
GetFocus
CharNextA
CreateCaret
ReleaseCapture
LoadStringW
ClipCursor
DeferWindowPos
LoadCursorA
SetMenuItemInfoA
GetMenuItemInfoW
MsgWaitForMultipleObjects
ChildWindowFromPointEx
GetMessageA
CallWindowProcA
SetFocus
MoveWindow
SetWindowTextA
PostMessageA
WinHelpA
InvalidateRect
GetKeyboardState
SystemParametersInfoA
GetCapture
GetKeyNameTextW
TranslateMDISysAccel
gdi32
EndDoc
CopyEnhMetaFileA
SetStretchBltMode
GetDIBits
UnrealizeObject
OffsetRgn
GetWindowOrgEx
CreateFontIndirectA
EndPage
GetNearestColor
RectVisible
IntersectClipRect
SetPixelV
OffsetClipRgn
ExtCreatePen
ole32
OleSetMenuDescriptor
RevokeDragDrop
CoTaskMemAlloc
StringFromCLSID
OleSetClipboard
CoCreateInstance
IsEqualGUID
mobstext
_FRteps
_LDscale
_FDenorm
_Hugeval
_Denorm
_LCosh
_Stof
_Strcoll
kernel32
LocalFree
GetCommandLineW
TerminateProcess
GlobalGetAtomNameA
CreateFileMappingA
GetLastError
LoadLibraryA
WaitForMultipleObjects
GetFileAttributesW
CopyFileA
GetDiskFreeSpaceA
WaitForSingleObject
GetVersionExA
GlobalUnlock
VirtualQueryEx
GlobalAlloc
lstrlenW
UnmapViewOfFile
CompareStringA
GetModuleHandleA
GetLocalTime
VirtualProtect
LocalAlloc
GetWindowsDirectoryA
FileTimeToLocalFileTime
GetTickCount
MapViewOfFileEx
UnhandledExceptionFilter
GetThreadPriority
MultiByteToWideChar
LeaveCriticalSection
GetFileAttributesA
CloseHandle
HeapAlloc
ReleaseMutex
GetExitCodeThread
VirtualQuery
GetSystemInfo
GetProfileStringA
SizeofResource
winmm
PlaySoundA
timeGetTime
wininet
InternetCombineUrlA
InternetGetLastResponseInfoA
InternetWriteFile
InternetGoOnline
InternetCloseHandle
version
GetFileVersionInfoSizeA
oleaut32
GetErrorInfo
SysAllocStringByteLen
VariantClear
VariantCopy
SysReAllocStringLen
GetActiveObject
comctl32
ImageList_SetBkColor
ImageList_ReplaceIcon
InitCommonControls
imm32
ImmReleaseContext
ImmGetCompositionStringA
shell32
SHGetSpecialFolderPathA
advapi32
RegCloseKey
RegSetValueExA
SetSecurityDescriptorDacl
comdlg32
GetOpenFileNameA
Sections
.text Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ