Static task
static1
Behavioral task
behavioral1
Sample
ba048b52cc9caebf1b12ebaa3724653d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ba048b52cc9caebf1b12ebaa3724653d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ba048b52cc9caebf1b12ebaa3724653d_JaffaCakes118
-
Size
501KB
-
MD5
ba048b52cc9caebf1b12ebaa3724653d
-
SHA1
f0de5157ac7f770b3bd975817bd6b855f8bc8563
-
SHA256
a2134a92c36233c35f6991c51ecc179ab213c473ecf10514d4d649ded788ef7e
-
SHA512
7f4e802ba1e2d71e5ea4076b55ac7844ec5f3091c332717107dedd8f26605ea00c3ee09bb93d82ac72c03338d36b3a3416319e2b2337de2f307a2bc92c98f394
-
SSDEEP
6144:N7Sz5gR3XpnHJIRxBHPvGfGANgDqpvQLiGb7ipJIx9MdxX1:JSz5g5XbIR7u/SiGvuNt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ba048b52cc9caebf1b12ebaa3724653d_JaffaCakes118
Files
-
ba048b52cc9caebf1b12ebaa3724653d_JaffaCakes118.exe windows:1 windows x86 arch:x86
f701686e49877bce6cef147f4e3d760e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
GetCurrentHwProfileA
comctl32
ImageList_Destroy
ImageList_DrawEx
comdlg32
PrintDlgA
gdi32
Arc
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateDIBSection
CreateFontIndirectA
CreateFontIndirectW
CreateHatchBrush
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
ExtFloodFill
ExtTextOutA
ExtTextOutW
GetCurrentObject
GetCurrentPositionEx
GetDeviceCaps
GetDIBits
GetObjectA
GetPixel
GetStockObject
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsA
GetTextMetricsW
LineTo
MoveToEx
Pie
Polygon
Polyline
ResetDCA
RoundRect
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBits
SetPixelV
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
StartDocA
StretchBlt
TextOutA
TextOutW
kernel32
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateFileW
CreateProcessA
CreateThread
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushConsoleInputBuffer
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
GetCommandLineW
GetConsoleCursorInfo
GetConsoleMode
GetConsoleTitleA
GetCurrentDirectoryA
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStringsA
GetEnvironmentVariableA
GetFileAttributesA
GetFileAttributesW
GetFileType
GetLastError
GetLocaleInfoA
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetNumberOfConsoleMouseButtons
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetTickCount
GetVersionExA
GetVolumeInformationA
GetVolumeInformationW
GlobalAlloc
GlobalFree
LoadLibraryA
MoveFileA
MultiByteToWideChar
OutputDebugStringA
PeekConsoleInputA
PeekConsoleInputW
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputA
ReadFile
RemoveDirectoryA
ScrollConsoleScreenBufferA
SearchPathA
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleMode
SetConsoleTitleA
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetLastError
SetLocalTime
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
WriteConsoleA
WriteConsoleOutputA
WriteFile
ole32
CoInitialize
CoUninitialize
oleaut32
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantClear
user32
AdjustWindowRectEx
CallWindowProcA
CallWindowProcW
CharLowerBuffA
CharNextA
CharToOemBuffA
CharUpperBuffA
CreateAcceleratorTableA
CreateDialogIndirectParamA
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyIcon
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawIconEx
FillRect
FindWindowA
GetClientRect
GetCursorPos
GetDC
GetDlgItem
GetKeyState
GetMenuItemInfoA
GetScrollInfo
GetSysColor
GetSystemMenu
GetSystemMetrics
GetWindowLongA
GetWindowLongW
GetWindowRect
GetWindowTextA
GetWindowTextW
GetWindowTextLengthA
GetWindowTextLengthW
InsertMenuItemA
InvalidateRect
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
LoadImageA
LoadImageW
LoadStringA
MessageBeep
MessageBoxA
OemToCharBuffA
PeekMessageA
PeekMessageW
PostMessageA
RegisterClassExA
RegisterClassExW
ReleaseDC
ScreenToClient
SendMessageA
SendMessageW
SetFocus
SetForegroundWindow
SetMenuItemInfoA
SetMenuItemInfoW
SetScrollInfo
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
TranslateMessage
UpdateWindow
winspool.drv
DeviceCapabilitiesA
DocumentPropertiesA
OpenPrinterA
winmm
PlaySoundA
ws2_32
closesocket
WSACleanup
Sections
.text Size: 437KB - Virtual size: 436KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.link Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rloc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ