Static task
static1
Behavioral task
behavioral1
Sample
b492a89c2b4725de19d289e284342325_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b492a89c2b4725de19d289e284342325_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b492a89c2b4725de19d289e284342325_JaffaCakes118
-
Size
168KB
-
MD5
b492a89c2b4725de19d289e284342325
-
SHA1
97f8a5a48f4b135e78e08bf8fa8dba21204f8d11
-
SHA256
008a9cfde9f61d064b61462f61d3bfc580149f7ac675ffbc2a72f8543f9d5ee1
-
SHA512
398e5eaa85d58337c7e9f2229f308df322b17e7dc75c44d9bef2032f5a5f92e2502605237cf8c3496259706c113b07d84ae11269eb460be8075d15392863066a
-
SSDEEP
3072:DQlWAJuuhe+3NZzoR+utqMUMEEhNVuFxo9lQZngjkBzKnBWDockG0E:DEd3ZziZtvRPuFxoP4lKnYW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b492a89c2b4725de19d289e284342325_JaffaCakes118
Files
-
b492a89c2b4725de19d289e284342325_JaffaCakes118.exe windows:4 windows x86 arch:x86
775d673a80b34695f48aad316aea32ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GlobalAlloc
SetFilePointer
SystemTimeToFileTime
GetFileAttributesA
LocalFileTimeToFileTime
CreateDirectoryA
SetFileTime
SetStdHandle
LoadLibraryA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GlobalUnlock
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GlobalFree
GetPrivateProfileStringA
GetFileSize
FlushFileBuffers
GetCurrentDirectoryA
FindFirstFileA
lstrcpynA
FindNextFileA
FindClose
GetSystemDirectoryA
lstrcatA
lstrcpyA
GetLocalTime
CreateThread
CreateFileA
WriteFile
ReadFile
CloseHandle
GetModuleHandleA
CreateMutexA
GetLastError
GetTickCount
GetModuleFileNameA
lstrlenA
SetCurrentDirectoryA
ExitProcess
WideCharToMultiByte
Sleep
user32
TranslateMessage
GetMessageA
SetTimer
DispatchMessageA
GetClientRect
DestroyMenu
TrackPopupMenu
wsprintfA
SetWindowPos
ShowCaret
InsertMenuItemA
CreatePopupMenu
CreateMenu
GetDC
ReleaseDC
GetCaretPos
HideCaret
OpenClipboard
GetClipboardData
CloseClipboard
DestroyCaret
SetCaretPos
DrawTextA
SetRect
FillRect
GetCursorPos
ShowWindow
PostQuitMessage
DefWindowProcA
MoveWindow
SetCapture
ReleaseCapture
LoadCursorA
RegisterClassExA
CreateWindowExA
MessageBoxA
GetDesktopWindow
GetWindowRect
LoadIconA
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
winmm
PlaySoundA
gdi32
GetTextExtentPoint32A
CreateFontA
SetTextColor
CreateSolidBrush
DeleteObject
SelectObject
BitBlt
DeleteDC
SetBkMode
SetBkColor
CreateDIBitmap
CreateCompatibleBitmap
CreateCompatibleDC
advapi32
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegEnumKeyExA
shell32
Shell_NotifyIconA
ShellExecuteA
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ