Static task
static1
Behavioral task
behavioral1
Sample
b3e00bc042386bafbd1a1c3964e539b5_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b3e00bc042386bafbd1a1c3964e539b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3e00bc042386bafbd1a1c3964e539b5_JaffaCakes118
-
Size
134KB
-
MD5
b3e00bc042386bafbd1a1c3964e539b5
-
SHA1
4a11fa9bcd0bc577017a1fc85bc6604cf44b8822
-
SHA256
4669be62c15f2c03a224c9b97061d0d883446e026e525f2b59923e79ffb25537
-
SHA512
119042bfcba4eebc6409723a8259195e3cef226121e12bede7e7964cf2a49f275034e967d20b588743001b576858b1cb6f5c46a51bfb89e4ab0da280391ceab7
-
SSDEEP
3072:HHsdHVhV1//OVPGPTREq/JwHs+99rQSTyChIkbkr4mE/CDdsNYFfP:YHnWVedEPM+7rX51o8mME
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3e00bc042386bafbd1a1c3964e539b5_JaffaCakes118
Files
-
b3e00bc042386bafbd1a1c3964e539b5_JaffaCakes118.exe windows:5 windows x86 arch:x86
9cdfed99bd3a799fd82ee389fe435411
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
QueryPerformanceCounter
QueryPerformanceFrequency
LocalReAlloc
lstrcpyW
FindClose
InterlockedDecrement
GetStdHandle
GetVersion
lstrcmpiW
SetEndOfFile
UnhandledExceptionFilter
LocalFree
CreateFileW
MapViewOfFile
GetFileInformationByHandle
WriteFile
FoldStringW
CreateFileA
LoadLibraryA
SetConsoleCtrlHandler
FormatMessageW
GetVersionExA
DeleteFileW
CreateFileMappingW
TlsAlloc
TlsGetValue
GetSystemTime
FreeLibrary
SetThreadLocale
CreateEventA
GetFileSize
LoadResource
GetSystemTimeAsFileTime
GetOEMCP
GetCurrentProcessId
ExitProcess
HeapDestroy
GetVolumeInformationW
HeapReAlloc
MultiByteToWideChar
GetLocaleInfoW
LockResource
LocalUnlock
GetProcAddress
GetACP
GlobalLock
lstrcmpW
GetLocalTime
LocalSize
UnmapViewOfFile
Sleep
OpenProcess
SetEvent
GetStringTypeA
OutputDebugStringA
GlobalFree
EnterCriticalSection
WriteConsoleA
IsProcessorFeaturePresent
CreateDirectoryA
CompareStringW
CreateThread
SetThreadPriority
GetTickCount
GetCurrentThreadId
lstrlenW
GetLastError
GetFileAttributesW
GetDateFormatW
GetShortPathNameA
GetTimeFormatW
lstrcatW
LocalLock
GlobalUnlock
VirtualProtect
GetLocaleInfoA
InitializeCriticalSection
GetUserDefaultLCID
CompareStringA
CreateDirectoryW
GetStringTypeW
WaitForMultipleObjects
SetUnhandledExceptionFilter
lstrcpynW
IsBadReadPtr
InterlockedCompareExchange
InterlockedIncrement
GetCommandLineW
LeaveCriticalSection
GetModuleHandleA
LocalAlloc
DisableThreadLibraryCalls
RtlUnwind
CloseHandle
CreateSemaphoreW
WritePrivateProfileStringA
GlobalReAlloc
WideCharToMultiByte
GetCurrentProcess
GetUserDefaultUILanguage
GetCurrentThread
FindFirstFileW
ReadFile
FileTimeToLocalFileTime
SetLastError
FreeEnvironmentStringsA
MulDiv
GetVersionExW
FlushFileBuffers
VirtualQuery
GetStartupInfoA
RaiseException
SetHandleCount
user32
GetDC
SetActiveWindow
SendDlgItemMessageW
DeleteMenu
GetMenu
EndDialog
MapWindowPoints
InvalidateRect
ShowWindow
UnhookWinEvent
GetWindowPlacement
TranslateAcceleratorW
OpenClipboard
DrawTextExW
GetMenuState
SetScrollPos
WinHelpW
LoadIconW
CharUpperW
DestroyWindow
IsClipboardFormatAvailable
CheckMenuItem
wsprintfW
GetWindowTextW
TranslateMessage
PostMessageA
RegisterWindowMessageW
GetClientRect
SetWindowLongW
PostMessageW
GetKeyboardLayout
GetWindowLongW
IsDialogMessageW
DrawFocusRect
GetFocus
GetDlgCtrlID
LoadCursorW
GetSubMenu
CharNextW
MoveWindow
DestroyMenu
GetSysColor
GetWindowTextA
CloseClipboard
GetSystemMetrics
GetCursorPos
GetParent
MessageBeep
SetDlgItemTextW
CharUpperA
GetDesktopWindow
GetDlgItemTextW
ReleaseDC
MessageBoxW
DispatchMessageW
IsIconic
DefWindowProcW
CharLowerW
LoadStringW
EnableMenuItem
SetWindowTextW
SetWindowTextA
RegisterClassA
SetWindowPlacement
IsWindow
GetSystemMenu
UpdateWindow
RegisterClassExW
PostQuitMessage
SetWinEventHook
ScreenToClient
SetFocus
PeekMessageW
EnableWindow
GetForegroundWindow
CreateWindowExW
LoadImageW
GetClassNameA
GetMessagePos
GetDlgItem
DestroyIcon
SendMessageW
CallWindowProcW
GetMessageW
GetMenuItemCount
DialogBoxParamW
DefWindowProcA
LoadAcceleratorsW
ChildWindowFromPoint
CreateDialogParamW
SetCursor
msvcrt
_wtol
wcsncmp
_adjust_fdiv
_initterm
iswctype
??1type_info@@UAE@XZ
__p__fmode
_acmdln
__p__commode
exit
_snwprintf
realloc
memcpy
_cexit
??3@YAXPAX@Z
_XcptFilter
__setusermatherr
_exit
_errno
__set_app_type
wcsncpy
_c_exit
_controlfp
?terminate@@YAXXZ
__getmainargs
time
localtime
__dllonexit
comdlg32
GetFileTitleW
GetOpenFileNameW
PageSetupDlgW
ChooseFontW
FindTextW
PrintDlgExW
GetSaveFileNameW
ReplaceTextW
CommDlgExtendedError
winspool.drv
OpenPrinterW
GetPrinterDriverW
ClosePrinter
advapi32
RegQueryValueExW
RegQueryValueExA
IsTextUnicode
RegCloseKey
RegOpenKeyExA
RegCreateKeyW
RegSetValueExW
comctl32
CreateStatusWindowW
gdi32
GetTextMetricsW
SetViewportExtEx
CreateFontIndirectW
AbortDoc
SetWindowExtEx
SetBkMode
CreateDCW
EnumFontsW
GetTextFaceW
GetObjectW
GetTextExtentPoint32W
LPtoDP
GetDeviceCaps
SetAbortProc
StartPage
DeleteDC
SetMapMode
GetStockObject
EndPage
TextOutW
DeleteObject
SelectObject
EndDoc
StartDocW
shell32
ShellAboutW
DragFinish
DragQueryFileW
DragAcceptFiles
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ