Static task
static1
Behavioral task
behavioral1
Sample
bd4b005d6549713fa6bc1da76c0098bc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd4b005d6549713fa6bc1da76c0098bc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bd4b005d6549713fa6bc1da76c0098bc_JaffaCakes118
-
Size
448KB
-
MD5
bd4b005d6549713fa6bc1da76c0098bc
-
SHA1
ee824b6548fcfe7af14d7cf03ddd87d3de9d3622
-
SHA256
4627c4cf814ecda0dfb0c9233264e567e66fd464c6c89d258c4f99bef1e9a03d
-
SHA512
39bc0b02d0403d7936ca7cb2d3ed7523172d692a55f07c8c5e6e60a2d86a5ea8e4051e28d77c7663455cd412aea60f86e121c316bbbaa68d7c961254f05d566c
-
SSDEEP
12288:akaGIsqQqwIaIXWJh5XwUYkuw3zIcbcKkv:akaOJ/D3zIcbcKkv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd4b005d6549713fa6bc1da76c0098bc_JaffaCakes118
Files
-
bd4b005d6549713fa6bc1da76c0098bc_JaffaCakes118.exe windows:4 windows x86 arch:x86
33818192f1d24f0703d11d0586e03f3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
VirtualFree
IsBadWritePtr
FreeEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetEnvironmentStrings
LCMapStringW
GetStringTypeA
GetEnvironmentStringsW
LCMapStringA
IsBadCodePtr
SetStdHandle
HeapCreate
HeapDestroy
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalLock
GlobalUnlock
Sleep
GetCurrentDirectoryA
GlobalMemoryStatus
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetACP
HeapReAlloc
HeapSize
GetCommandLineA
RaiseException
ExitProcess
GetStartupInfoA
TerminateProcess
RtlUnwind
HeapAlloc
HeapFree
SetEndOfFile
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetCurrentProcess
SetErrorMode
GetCPInfo
GetOEMCP
TlsGetValue
GetProcessVersion
GlobalFlags
EnterCriticalSection
LocalReAlloc
GetTickCount
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
CloseHandle
GetCurrentThread
GetModuleFileNameA
lstrcmpA
lstrcpynA
GetLastError
SetLastError
LocalFree
MulDiv
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
InterlockedIncrement
GlobalFree
LoadResource
FreeLibrary
FindResourceA
LockResource
GetStringTypeW
IsBadReadPtr
user32
GetDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
DestroyMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PtInRect
KillTimer
WindowFromPoint
GetCursorPos
PostQuitMessage
ShowOwnedPopups
ValidateRect
GetMessageA
GetClassNameA
GetSysColorBrush
LoadStringA
InflateRect
GetDCEx
LockWindowUpdate
SetParent
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
PostMessageA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
LoadBitmapA
GetMenuCheckMarkDimensions
CopyRect
EndDeferWindowPos
IsWindowVisible
GetMenuState
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
SetWindowPlacement
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
UpdateWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsZoomed
LoadMenuA
SetMenu
GetSystemMetrics
SetActiveWindow
SetTimer
IsIconic
IsChild
GetAsyncKeyState
SetCapture
PeekMessageA
DispatchMessageA
TranslateMessage
LoadImageA
ReleaseDC
wsprintfA
SetCursor
ReleaseCapture
BeginDeferWindowPos
DeferWindowPos
GetParent
GetClientRect
IsWindow
CreatePopupMenu
ClientToScreen
SetRect
InvalidateRect
LoadIconA
LoadCursorA
EnableWindow
SendMessageA
GetWindowRect
GetMenu
UnregisterClassA
gdi32
SelectObject
CreateFontA
Polygon
PatBlt
DeleteObject
RealizePalette
GetObjectA
CreateHalftonePalette
SelectPalette
CreatePalette
GetDIBColorTable
DeleteDC
CreateCompatibleBitmap
GetDeviceCaps
Ellipse
GetPixel
SetPixelV
SetTextColor
SetBkColor
GetClipBox
SaveDC
CreateBitmap
GetStockObject
SetBkMode
RestoreDC
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SetWindowExtEx
IntersectClipRect
ExcludeClipRect
BitBlt
LineTo
MoveToEx
CreateRectRgn
CreatePen
PtVisible
CreatePatternBrush
TextOutA
ExtTextOutA
RectVisible
CreateRectRgnIndirect
StretchDIBits
Escape
GetTextMetricsA
GetCharWidthA
SetRectRgn
CreateFontIndirectA
CombineRgn
CreateSolidBrush
CreateCompatibleDC
comdlg32
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegFlushKey
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueExA
shell32
DragFinish
DragQueryFileA
comctl32
ord17
Sections
.text Size: 244KB - Virtual size: 241KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ