Static task
static1
Behavioral task
behavioral1
Sample
bb2571fb631ac32ef66eed2f4b194911_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb2571fb631ac32ef66eed2f4b194911_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb2571fb631ac32ef66eed2f4b194911_JaffaCakes118
-
Size
902KB
-
MD5
bb2571fb631ac32ef66eed2f4b194911
-
SHA1
e0229b63704b82edb6551dd557a30bbc89c06b1a
-
SHA256
a365e656ede535bd1d24cf5b84723453b4ef3eb9c4beae78f5cd4d5b63f1b7bb
-
SHA512
6e6edb61d993361d70dc7119c629e28b3021ca2c52de817f7b6bc50e63bf1d72a72e416f87215e40e9a2770768750183ebaeb588b91cbf7132426e35d7b425f0
-
SSDEEP
12288:Wflmx9o5j5n8u3SE+JlLOJVK7UEaM5SO4zg4vP+TXLftl:WtL3UJROJV7RFfkXLftl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb2571fb631ac32ef66eed2f4b194911_JaffaCakes118
Files
-
bb2571fb631ac32ef66eed2f4b194911_JaffaCakes118.exe windows:5 windows x86 arch:x86
9c8a0dc6e7e4776d65e74b6ae7ccbde4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetFileAttributesW
GetStartupInfoW
Sleep
ExitProcess
HeapAlloc
GetTimeZoneInformation
HeapFree
RtlUnwind
RaiseException
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
CreateFileA
FlushFileBuffers
WritePrivateProfileStringW
GlobalFlags
lstrlenA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
CompareStringA
InterlockedExchange
InterlockedDecrement
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
lstrcmpW
GetVersionExA
FreeResource
GetModuleHandleA
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SystemTimeToFileTime
GetLocalTime
UnmapViewOfFile
WriteFile
MapViewOfFile
CreateFileMappingW
GetCurrentProcess
DuplicateHandle
FileTimeToDosDateTime
SetFilePointer
GetFileInformationByHandle
GetFileType
FileTimeToSystemTime
GetModuleFileNameW
GetModuleHandleW
GetLastError
SetLastError
MultiByteToWideChar
LoadLibraryA
GetProcAddress
lstrlenW
WideCharToMultiByte
lstrcpynW
GetLocaleInfoW
lstrcpyW
GetNumberFormatW
MulDiv
FreeLibrary
LoadLibraryW
GetWindowsDirectoryW
ReadFile
CloseHandle
GetFileSize
CreateFileW
CopyFileW
FindResourceW
LoadResource
LockResource
QueryPerformanceCounter
SizeofResource
user32
GetMessageW
TranslateMessage
ValidateRect
PostQuitMessage
GetCursorPos
WindowFromPoint
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
ShowWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageW
MapWindowPoints
SetMenu
SetForegroundWindow
IsWindowVisible
PostMessageW
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
GetMenu
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
ClientToScreen
GetWindowThreadProcessId
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UpdateWindow
GetFocus
DrawEdge
ReleaseDC
GetDC
GetParent
IsWindow
UnregisterClassW
DestroyMenu
GetSysColorBrush
GetKeyState
MessageBeep
SetWindowLongW
KillTimer
GrayStringW
DrawTextExW
TabbedTextOutW
DrawTextW
InflateRect
InvalidateRect
RedrawWindow
FillRect
DrawIcon
GetSystemMetrics
GetClientRect
GetSysColor
SetActiveWindow
RegisterWindowMessageW
SetCapture
SetFocus
MessageBoxW
ReleaseCapture
GetAsyncKeyState
wsprintfW
CopyIcon
LoadCursorW
SetCursor
PtInRect
ScreenToClient
GetMessagePos
SetTimer
DestroyCursor
LoadIconW
LockWindowUpdate
GetWindowRect
SendMessageW
EnableWindow
GetClassInfoW
gdi32
CreateBitmap
SetWindowExtEx
CreatePen
ScaleWindowExtEx
MoveToEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
SelectClipRgn
DeleteObject
GetObjectW
LineTo
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateRectRgn
CreateSolidBrush
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetTextExtentPoint32W
GetBkColor
GetCurrentObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
DeleteDC
GetDeviceCaps
CreateFontIndirectW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegSetValueExW
RegOpenKeyW
RegEnumKeyW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
RegQueryValueW
RegOpenKeyExW
shell32
SHGetFolderPathW
ord165
ShellExecuteExW
ShellExecuteW
ExtractIconW
shlwapi
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathAddBackslashW
oleaut32
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantClear
VariantChangeType
VariantInit
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 548KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.1rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE