Static task
static1
Behavioral task
behavioral1
Sample
b224786f9134ff5d0fcc4b93d2e478ba_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b224786f9134ff5d0fcc4b93d2e478ba_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b224786f9134ff5d0fcc4b93d2e478ba_JaffaCakes118
-
Size
129KB
-
MD5
b224786f9134ff5d0fcc4b93d2e478ba
-
SHA1
f4f428d01e0cdbe06619abc48bc9dd711ae7c7d7
-
SHA256
b3e781bf7f635ebe9630bf0edc2b6d18ba6686b1ef8cd448c724cab0121f5a3b
-
SHA512
40e738e2d4a8a3d9017132bbd82d1d1512a480c0015fe2a528c5258ff3e8acba6d34bcad96964fa64d86eca506fef2ee2b3ef9182d55286ec3494b94310dd31c
-
SSDEEP
1536:v+Tkd9QP87RTTXiu2sDu6IPAO7gGOmY/lT6Su3McArt7aY521IZMTREZk/zL6jC+:N+rwlGSu3MH57aYwIqTwUzL6W8dYl7a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b224786f9134ff5d0fcc4b93d2e478ba_JaffaCakes118
Files
-
b224786f9134ff5d0fcc4b93d2e478ba_JaffaCakes118.exe windows:4 windows x86 arch:x86
0197f2b51e25ce512c68d5001af0cd2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAlloc
GetProfileStringA
GlobalFree
GlobalLock
GlobalUnlock
GetWindowsDirectoryA
GetLocaleInfoW
SetFilePointer
FlushFileBuffers
RaiseException
GetLocaleInfoA
LoadLibraryA
VirtualAlloc
GetStringTypeA
GetProcAddress
GetStringTypeW
LCMapStringA
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
WriteFile
RtlUnwind
InitializeCriticalSection
HeapCreate
HeapDestroy
VirtualFree
GetLastError
TlsGetValue
TlsAlloc
SetLastError
GetCurrentThreadId
DeleteCriticalSection
TlsSetValue
GetStdHandle
SetHandleCount
GetFileType
GetACP
GetCPInfo
GetOEMCP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
TerminateProcess
lstrlenA
CreateFileA
DeviceIoControl
GetDriveTypeA
MultiByteToWideChar
lstrcpyA
GetDiskFreeSpaceA
lstrcmpiA
RtlZeroMemory
lstrcatA
GetProcessHeap
HeapAlloc
HeapFree
WideCharToMultiByte
CloseHandle
GetStartupInfoA
InterlockedIncrement
GetCurrentProcess
InterlockedDecrement
ExitProcess
SetStdHandle
GetCommandLineA
GetVersion
GetVolumeInformationA
lstrcmpA
GetModuleHandleA
user32
EndPaint
BeginPaint
MessageBoxA
SetForegroundWindow
GetWindowTextA
RegisterClassA
LoadStringA
EnumWindows
LoadCursorA
DefDlgProcA
LoadIconA
SendDlgItemMessageA
WinHelpA
ShowWindow
SetWindowLongA
GetWindowLongA
GetDlgItem
EndDialog
SetDlgItemTextA
LoadBitmapA
SetFocus
DialogBoxParamA
UpdateWindow
FillRect
DrawTextA
GetClientRect
GetDC
ReleaseDC
SetTimer
DefWindowProcA
UnregisterClassA
PeekMessageA
LoadImageA
PostMessageA
wsprintfA
TranslateMessage
DispatchMessageA
CheckDlgButton
CreateDialogParamA
DestroyWindow
GetDesktopWindow
IsDlgButtonChecked
EnableWindow
SetCursor
GetWindowRect
MoveWindow
CallWindowProcA
GetParent
InvalidateRect
DrawFocusRect
GetSysColor
DrawIconEx
SendMessageA
gdi32
GetStockObject
DeleteDC
DeleteObject
GetObjectA
SelectObject
StretchBlt
SetBkMode
CreateBitmap
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
ExtTextOutA
CreateCompatibleDC
GetTextExtentPoint32A
SetBkColor
SetTextColor
advapi32
RegEnumValueA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
RegQueryValueExA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
shell32
SHGetFileInfoA
ShellExecuteA
ExtractIconExA
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
comctl32
ord17
PropertySheetA
CreatePropertySheetPageA
shlwapi
StrStrIA
Sections
.text Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE