Static task
static1
Behavioral task
behavioral1
Sample
a9b00a2ce2f228193f9d0879e16a0037_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
a9b00a2ce2f228193f9d0879e16a0037_JaffaCakes118
-
Size
21KB
-
MD5
a9b00a2ce2f228193f9d0879e16a0037
-
SHA1
ad44a9eaa8a66251179f1eb59498843c78945a1b
-
SHA256
168b72def3a055b1becef0a83aed7edd3ce5469b3ecfba2f6f202a6c0705b392
-
SHA512
e3c3e57cbe396e8db5e6cda71f1404b30560c0099994b89c10fcad7fd392efe61d3d112729eec4838cda2c11175cad1f7db519fefa29b6746847269da5d0757c
-
SSDEEP
384:J9FAJn5HDn5HMUX8E0tgJJrxEdXsaj7jRK4Zhc7vK0Kruv3HmoFRkbVZHiSj7:XaJFVjWdX5j3Rhhc7K9EX3RWVZHH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9b00a2ce2f228193f9d0879e16a0037_JaffaCakes118
Files
-
a9b00a2ce2f228193f9d0879e16a0037_JaffaCakes118.exe windows:4 windows x86 arch:x86
91a35ab3f73408154313dfbb71a487f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
SetConsoleCtrlHandler
GlobalFree
GlobalLock
GetCommandLineW
CreateEventA
TerminateProcess
lstrcpynW
GetCPInfo
QueryPerformanceCounter
GetEnvironmentStrings
FlushFileBuffers
FoldStringW
LocalAlloc
LocalSize
GetTickCount
CreateFileMappingW
TlsAlloc
GetUserDefaultLCID
UnmapViewOfFile
GetLocaleInfoW
ReadFile
WriteConsoleW
lstrcpyW
VirtualProtect
WriteFile
GetEnvironmentStringsW
GetSystemTime
SizeofResource
LocalLock
GetCurrentThread
GetLocalTime
TlsFree
GetVersionExA
GetThreadLocale
GlobalMemoryStatus
GetCurrentProcess
MoveFileA
CloseHandle
GetModuleHandleA
TlsGetValue
CreateEventW
GetCommandLineA
LoadLibraryA
DeleteFileW
FindClose
FreeEnvironmentStringsA
lstrlenW
CreateFileA
MapViewOfFile
OpenProcess
GetOEMCP
SearchPathW
HeapAlloc
SetFilePointer
DeviceIoControl
GetLastError
IsValidCodePage
VirtualFree
ReleaseSemaphore
GetFileInformationByHandle
OpenMutexA
lstrcatW
GetFileSize
CompareStringW
GetACP
GetVersionExW
GetStringTypeW
FindFirstFileW
MulDiv
DuplicateHandle
IsBadWritePtr
GetUserDefaultUILanguage
GetFileType
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
LocalReAlloc
GetTimeFormatW
GetSystemInfo
SystemTimeToFileTime
GetDateFormatW
InterlockedExchange
GetConsoleMode
GetVersion
UnhandledExceptionFilter
GetFileAttributesW
lstrcmpW
LCMapStringA
HeapDestroy
InterlockedDecrement
GlobalUnlock
LocalFree
SetErrorMode
InterlockedCompareExchange
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
HeapFree
InitializeCriticalSection
FormatMessageW
SetLastError
GetStartupInfoA
SetEndOfFile
LeaveCriticalSection
GetCurrentProcessId
SetUnhandledExceptionFilter
LockResource
GetTempPathW
CreateThread
Sleep
CreateFileW
GetCurrentThreadId
ExitProcess
DisableThreadLibraryCalls
WideCharToMultiByte
GetProcAddress
ExitThread
lstrcmpiW
IsDebuggerPresent
LocalUnlock
winspool.drv
OpenPrinterW
GetPrinterDriverW
ClosePrinter
user32
GetDC
CopyRect
CheckMenuItem
GetCursorPos
CharLowerW
DialogBoxParamW
IsDialogMessageW
LoadStringA
DestroyMenu
RegisterClassExW
GetWindowLongW
EnableMenuItem
DefWindowProcW
RegisterWindowMessageA
SetWindowPlacement
CharNextW
GetFocus
SetWinEventHook
GetMenuItemCount
GetDesktopWindow
MoveWindow
CloseClipboard
GetForegroundWindow
GetMenu
GetWindowPlacement
SetActiveWindow
SetDlgItemTextW
RegisterWindowMessageW
UnregisterClassA
GetSystemMetrics
GetDlgCtrlID
wsprintfW
SetScrollPos
LoadImageW
GetWindowTextW
EnumThreadWindows
CreateDialogParamW
GetDlgItemTextW
EndDialog
CreateWindowExW
OpenClipboard
PostQuitMessage
GetSubMenu
LoadCursorW
DispatchMessageW
CreatePopupMenu
LoadCursorA
PostMessageA
SetFocus
LoadStringW
SetCursor
CallWindowProcA
TranslateMessage
MessageBeep
CharUpperW
ChildWindowFromPoint
GetParent
GetMenuState
UpdateWindow
UnhookWinEvent
GetMessageW
GetDlgItem
PeekMessageW
MessageBoxA
GetKeyboardLayout
GetSystemMenu
PostMessageW
TranslateAcceleratorW
ReleaseDC
WinHelpW
EnableWindow
LoadIconW
LoadAcceleratorsW
IsIconic
GetClientRect
IsWindow
DrawTextExW
DestroyWindow
UnhookWindowsHookEx
SendDlgItemMessageW
SendMessageW
MessageBoxW
SystemParametersInfoA
DeleteMenu
IsClipboardFormatAvailable
SetWindowLongW
ShowWindow
SetWindowTextW
UnregisterClassW
EqualRect
ScreenToClient
InvalidateRect
DestroyIcon
msvcrt
_unlock
_XcptFilter
_initterm
_c_exit
_controlfp
_onexit
_snwprintf
_wtol
_lock
_cexit
time
__setusermatherr
wcschr
_acmdln
__set_app_type
_amsg_exit
memcpy
isdigit
__wgetmainargs
wcsncpy
__p__commode
iswctype
_adjust_fdiv
_exit
_iob
__getmainargs
__p__fmode
wcsncmp
localtime
exit
comdlg32
GetOpenFileNameW
GetFileTitleW
GetSaveFileNameW
ReplaceTextW
FindTextW
PrintDlgExW
CommDlgExtendedError
ChooseFontW
PageSetupDlgW
comctl32
CreateStatusWindowW
gdi32
SelectObject
EndDoc
LPtoDP
GetStockObject
AbortDoc
GetTextMetricsW
SetWindowExtEx
CreateDCW
StartPage
SetViewportExtEx
SetAbortProc
GetDeviceCaps
GetTextFaceW
GetTextExtentPoint32W
EndPage
DeleteDC
EnumFontsW
CreateFontIndirectW
TextOutW
SetBkMode
DeleteObject
StartDocW
GetObjectW
SetMapMode
shell32
ShellAboutW
DragAcceptFiles
DragFinish
DragQueryFileW
advapi32
RegSetValueExW
RegQueryValueExA
RegCreateKeyW
IsTextUnicode
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ