Static task
static1
Behavioral task
behavioral1
Sample
ab1a71d4f0c25f8ef860c0aa9dce02d5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab1a71d4f0c25f8ef860c0aa9dce02d5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ab1a71d4f0c25f8ef860c0aa9dce02d5_JaffaCakes118
-
Size
256KB
-
MD5
ab1a71d4f0c25f8ef860c0aa9dce02d5
-
SHA1
ca400feb44250a6344de7aa783fff8cf2b646fcf
-
SHA256
962a2f58aeb92f13f62ccc8eadb6cc14d04f74bfe7bbe9c99aab31c3b39a68b1
-
SHA512
e66f5f9dda4067869150d4a8cbbed4e1851f19b4c72297c6c76fb8d779f56c3dea23ff3ca06988cfa4a0389e942ca311ee577f8e7ca906b257c9e1509ea2b1e1
-
SSDEEP
6144:bx736w2rLQ+pHEql4Qlfckz56iPp2HcYiH:bt3va8+mqBfcktI8Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab1a71d4f0c25f8ef860c0aa9dce02d5_JaffaCakes118
Files
-
ab1a71d4f0c25f8ef860c0aa9dce02d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
45cac2995fce03273043da9ae46b844a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetForegroundWindow
PostQuitMessage
GetWindow
GetWindowLongA
GetParent
FillRect
SetFocus
SendDlgItemMessageA
GetDlgItem
SetDlgItemTextA
GetDlgItemTextA
UnionRect
GetClassNameA
EqualRect
UpdateWindow
IsRectEmpty
GetUpdateRect
IsWindowVisible
EnumWindows
SetCursor
KillTimer
GetDesktopWindow
MessageBoxA
BeginPaint
SetClassWord
DefWindowProcA
EndDialog
GetClientRect
MoveWindow
DialogBoxParamA
LoadIconA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowPos
CreateWindowExA
SetRect
DestroyWindow
IsWindow
GetDC
ReleaseDC
CopyRect
SetRectEmpty
PostMessageA
OffsetRect
IntersectRect
SetWindowLongA
GetAsyncKeyState
DestroyCursor
GetCursorPos
EndPaint
LoadCursorA
InvalidateRect
PtInRect
SetTimer
GetWindowRect
FindWindowA
gdi32
BitBlt
CreateRectRgnIndirect
SetRectRgn
SelectClipRgn
CreateSolidBrush
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SelectPalette
GetObjectA
RealizePalette
SetMapMode
GetMapMode
SetBkColor
GetPixel
SetTextColor
CreateBitmap
TextOutA
GetTextExtentPoint32A
SetBkMode
GetStockObject
CreatePalette
CreateFontIndirectA
GetDeviceCaps
CreateDIBitmap
DeleteDC
winmm
mciSendCommandA
kernel32
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
HeapCreate
WriteFile
GetLastError
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GlobalFree
GlobalUnlock
GlobalLock
MulDiv
GetProcAddress
LoadLibraryA
HeapDestroy
GetEnvironmentStringsW
FindResourceA
GetTickCount
GlobalAlloc
WinExec
LocalFree
LocalUnlock
LocalLock
LocalAlloc
_lclose
GlobalReAlloc
OpenFile
GetTempFileNameA
GetTempPathA
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
CloseHandle
UnmapViewOfFile
ReadFile
GetFileType
GetStdHandle
SetHandleCount
WideCharToMultiByte
GetEnvironmentStrings
SetFilePointer
FlushFileBuffers
GetModuleFileNameA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
TerminateProcess
UnhandledExceptionFilter
GetCurrentProcess
ExitProcess
HeapAlloc
HeapFree
GetStartupInfoA
GetVersion
GetCommandLineA
GetModuleHandleA
RtlUnwind
LoadResource
SizeofResource
FreeResource
LockResource
SetStdHandle
DeleteFileA
HeapSize
SetEndOfFile
comdlg32
GetSaveFileNameA
shell32
ShellExecuteA
Sections
.text Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ