Static task
static1
Behavioral task
behavioral1
Sample
b9dc6a3af151d433049fc9e19a1b1348_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
b9dc6a3af151d433049fc9e19a1b1348_JaffaCakes118
-
Size
408KB
-
MD5
b9dc6a3af151d433049fc9e19a1b1348
-
SHA1
76054a708704b8de4bb8d0d363022c4dbe3f6390
-
SHA256
67e2f439cf7021f69bec72f484ad0ba914d3eddc26243ea6fdf07318c9947cdf
-
SHA512
f3601f7d21ac7dc823ca1c2ea01548cd02fa30c46adbf153c70e3b48d6dcf53da7d5cc3faa740fe1146f2631b11a1152e5c2611c2031768805e68083a5f47711
-
SSDEEP
6144:7utnds+Z59fnmG1LvQWybOCNCTpc3+RlzEPMZyw/fBhsoORg2:Ctnp59fmG1LvP9m3YzEPAyw/lz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9dc6a3af151d433049fc9e19a1b1348_JaffaCakes118
Files
-
b9dc6a3af151d433049fc9e19a1b1348_JaffaCakes118.exe windows:4 windows x86 arch:x86
e38d833438252ea576e38d5d5469f738
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
TerminateProcess
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
RtlUnwind
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetProcAddress
CloseHandle
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalFree
lstrlenA
lstrcpynA
GlobalLock
GlobalUnlock
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetStringTypeA
user32
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
GetDC
ReleaseDC
GetWindowDC
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
GetActiveWindow
DestroyMenu
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
CreateDialogIndirectParamA
EndDialog
IsZoomed
WindowFromPoint
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
PostQuitMessage
ShowOwnedPopups
ValidateRect
TranslateMessage
GetMessageA
CharUpperA
GetClassNameA
GetSysColorBrush
LoadStringA
SetRect
InvertRect
GetDCEx
LockWindowUpdate
LoadIconA
PostMessageA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
IsWindow
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
SetMenuItemBitmaps
GetTopWindow
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
IsIconic
GetWindowPlacement
GetSystemMetrics
GetParent
ClientToScreen
LoadMenuA
GetSubMenu
EnableMenuItem
GrayStringA
DrawTextA
TabbedTextOutA
DrawStateA
DestroyIcon
FillRect
GetWindowRect
OffsetRect
SystemParametersInfoA
CheckMenuItem
GetNextDlgTabItem
IsWindowEnabled
SetCursor
GetCursorPos
KillTimer
SetTimer
ReleaseCapture
SetFocus
ScreenToClient
SetCapture
PtInRect
GetDlgCtrlID
MoveWindow
InflateRect
BeginPaint
SetWindowTextA
IsDialogMessageA
GetClientRect
EndPaint
ShowWindow
InvalidateRect
GetSysColor
UpdateWindow
SendMessageA
IsWindowVisible
LoadBitmapA
MessageBoxA
EnableWindow
LoadCursorA
GetDlgItem
UnregisterClassA
gdi32
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
SelectObject
DeleteObject
ExtSelectClipRgn
GetDeviceCaps
CreatePen
CreateSolidBrush
PatBlt
CreateRectRgnIndirect
StretchDIBits
GetCharWidthA
CreateFontA
GetTextMetricsA
CombineRgn
RestoreDC
SaveDC
DeleteDC
SetBkColor
SetTextColor
GetClipBox
Escape
ExtTextOutA
TextOutA
SetBrushOrgEx
RectVisible
PtVisible
CreateBitmap
CreatePatternBrush
CreateCompatibleBitmap
CreateRectRgn
SetRectRgn
GetTextExtentPoint32A
CreateFontIndirectA
GetStockObject
CreateCompatibleDC
GetObjectA
BitBlt
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegOpenKeyExW
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
shell32
DragFinish
DragQueryFileA
comctl32
ImageList_Draw
ImageList_AddMasked
ImageList_GetIcon
ord17
ImageList_Destroy
ImageList_Create
ImageList_GetIconSize
ImageList_Duplicate
msimg32
TransparentBlt
GradientFill
Sections
.text Size: 156KB - Virtual size: 155KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ