Static task
static1
Behavioral task
behavioral1
Sample
b34fd8e09365cd6c0e7a0a952c2f19aa_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b34fd8e09365cd6c0e7a0a952c2f19aa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b34fd8e09365cd6c0e7a0a952c2f19aa_JaffaCakes118
-
Size
78KB
-
MD5
b34fd8e09365cd6c0e7a0a952c2f19aa
-
SHA1
ecf6e4a6ddc25444185d361b71a7cca5e3658b74
-
SHA256
6b9e1bd49eed156102fdb15c7590dc198bddc273485791abb75d81ee68a73b53
-
SHA512
c96724cc9fc093092c1cfc14d5b6c2a4e9fc1a5a4c99641ab9c061ac8fcbb702d793a95ccdacb837564d7ed9a93fbfa909cd2b252aaa206e3bb359e4630afa58
-
SSDEEP
1536:8Sv7UISiMYVaE3qGZ+qh7fnpvUGUEBOCQZIwluhUBKOYM:5zUKqGEq9fpvVHBOgwxm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b34fd8e09365cd6c0e7a0a952c2f19aa_JaffaCakes118
Files
-
b34fd8e09365cd6c0e7a0a952c2f19aa_JaffaCakes118.exe windows:4 windows x86 arch:x86
cf01a82ae61ad6ae28d336932f980aa6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
dwOKSubclass
ReplaceTextA
PrintDlgW
PrintDlgExA
CommDlgExtendedError
ChooseFontW
ChooseColorW
user32
SetWindowPlacement
TrackPopupMenu
TranslateAcceleratorA
LoadIconA
InvalidateRect
GetWindowLongA
GetSystemMetrics
GetSysColorBrush
GetMessageA
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetDlgCtrlID
SetWindowLongA
GetClientRect
GetClassNameA
DrawMenuBar
DrawIconEx
DispatchMessageA
DialogBoxIndirectParamA
DeleteMenu
CreateIconIndirect
CheckMenuRadioItem
CallWindowProcA
BeginPaint
BeginDeferWindowPos
AppendMenuA
wsprintfA
SetMenuItemInfoA
ScrollWindowEx
ScreenToClient
RegisterClassA
GetDC
MsgWaitForMultipleObjects
msi
MsiSetMode
MsiSetInternalUI
MsiReinstallFeatureW
MsiRecordSetStreamW
MsiRecordReadStream
MsiRecordIsNull
MsiQueryProductStateA
MsiQueryFeatureStateFromDescriptorW
MsiProvideQualifiedComponentA
MsiProvideComponentA
MsiProvideAssemblyW
MsiSourceListAddSourceA
MsiPreviewBillboardA
MsiOpenDatabaseA
MsiGetShortcutTargetA
MsiGetFileSignatureInformationW
MsiFormatRecordA
MsiEnumFeaturesA
MsiEnumComponentsA
MsiDecomposeDescriptorW
MsiConfigureProductW
MsiConfigureFeatureFromDescriptorW
MsiApplyPatchA
MsiSourceListForceResolutionA
MsiUseFeatureA
MsiUseFeatureW
MsiViewGetErrorW
MsiPreviewDialogA
kernel32
GetACP
ExitProcess
EnumSystemCodePagesA
DeleteFileW
CreateIoCompletionPort
CreateHardLinkW
CopyFileW
CopyFileA
ConvertDefaultLocale
ConnectNamedPipe
CloseHandle
GetComputerNameExW
GetModuleHandleA
GetOEMCP
GetPriorityClass
GetProfileIntW
GetStartupInfoA
GetSystemTime
GetTapeParameters
GetUserDefaultUILanguage
GetVersionExA
GetWriteWatch
GlobalAddAtomW
GlobalFix
GlobalHandle
HeapAlloc
HeapCreate
IsBadReadPtr
IsValidLanguageGroup
LoadModule
QueryDosDeviceW
QueryInformationJobObject
ReadFile
_lopen
_hwrite
WritePrivateProfileStructA
WritePrivateProfileSectionA
VerLanguageNameA
TlsGetValue
SetThreadIdealProcessor
SetLocalTime
SetErrorMode
SetCurrentDirectoryA
SearchPathA
RtlMoveMemory
RequestWakeupLatency
RemoveDirectoryW
ReleaseMutex
ReadProcessMemory
GetCommandLineA
oledlg
OleUIInsertObjectA
OleUIChangeIconA
OleUIBusyA
dbghelp
SymFunctionTableAccess64
SymGetSymNext64
SymRegisterFunctionEntryCallback64
SymUnloadModule64
SymGetOptions
comctl32
CreatePropertySheetPageW
CreateStatusWindowA
CreateUpDownControl
DrawInsert
DrawStatusTextA
FlatSB_EnableScrollBar
FlatSB_GetScrollInfo
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
ImageList_Add
ImageList_Destroy
ImageList_DragEnter
ImageList_Duplicate
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_Read
ImageList_SetBkColor
ImageList_SetDragCursorImage
InitCommonControls
InitCommonControlsEx
LBItemFromPt
UninitializeFlatSB
CreatePropertySheetPageA
security
DeleteSecurityPackageA
CompleteAuthToken
AddSecurityPackageA
AcquireCredentialsHandleA
RevertSecurityContext
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ