Static task
static1
Behavioral task
behavioral1
Sample
ce9575f968e1ba834030292bb1212088_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce9575f968e1ba834030292bb1212088_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce9575f968e1ba834030292bb1212088_JaffaCakes118
-
Size
199KB
-
MD5
ce9575f968e1ba834030292bb1212088
-
SHA1
a42e263169e5307dcfafb8c23c2b6c05bbd07bbd
-
SHA256
784ae099669e56cc8752cfe96fac3e0b5fc4f3c179e5eeb30c08458948e09672
-
SHA512
ec9ae471d5d9180bf282f8f2cd26e4901b71c62ba4fd083ec361efa24ee1c82be804eb0b61d4533344fd767f48c8ff8a89a72010364a7ab0f11a58fad345f622
-
SSDEEP
6144:U+oB1UHzB6eAjvqwkT1RSL3IWbkqUbv3M4Oj/n:U9ytqzqwGRSL3IGx4OjP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce9575f968e1ba834030292bb1212088_JaffaCakes118
Files
-
ce9575f968e1ba834030292bb1212088_JaffaCakes118.exe windows:4 windows x86 arch:x86
468444aaf4a32020be796e15f1eb8729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoFreeUnusedLibraries
shell32
SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA
SHGetDesktopFolder
user32
GetClassInfoA
FillRect
EndPaint
EnumChildWindows
DrawMenuBar
GetFocus
GetDCEx
DrawIconEx
EmptyClipboard
GetDesktopWindow
FrameRect
GetCursorPos
EnumThreadWindows
GetCursor
GetClassNameA
EnableWindow
EnableScrollBar
GetDC
EnableMenuItem
FindWindowA
GetCapture
EqualRect
GetClientRect
GetForegroundWindow
DrawTextA
EnumWindows
GetClassLongA
GetClipboardData
GetActiveWindow
GetDlgItem
msvcrt
mbstowcs
fabs
wcscspn
rand
exp
time
tolower
log
exit
advapi32
RegEnumKeyExA
oleaut32
SafeArrayGetUBound
SysAllocStringLen
SafeArrayUnaccessData
VariantCopyInd
SysStringLen
GetErrorInfo
RegisterTypeLib
SafeArrayGetElement
OleLoadPicture
gdi32
GetObjectA
GetRgnBox
GetCurrentPositionEx
CreateFontIndirectA
GetDIBits
GetClipBox
CreateCompatibleBitmap
GetBitmapBits
SelectPalette
CreateCompatibleDC
GetDIBColorTable
CreatePenIndirect
GetPixel
SaveDC
SelectObject
SetTextColor
GetDCOrgEx
RestoreDC
GetPaletteEntries
BitBlt
CreateBrushIndirect
CreatePalette
CreateDIBSection
SetBkColor
CreateBitmap
SetPixel
CreateDIBitmap
SetBkMode
LineTo
CopyEnhMetaFileA
kernel32
GetStartupInfoA
VirtualAllocEx
ExitThread
LoadLibraryA
GlobalFindAtomA
InitializeCriticalSection
RaiseException
HeapAlloc
lstrlenA
GetVersionExA
GlobalAddAtomA
LoadResource
LocalAlloc
GetUserDefaultLCID
LoadLibraryExA
VirtualAlloc
GetThreadLocale
GetStdHandle
LockResource
GetSystemDefaultLangID
GlobalDeleteAtom
GetVersion
GetTickCount
GetModuleFileNameA
GetStringTypeW
ExitProcess
IsBadReadPtr
GetStringTypeA
GlobalAlloc
GetLocaleInfoA
GetProcAddress
HeapFree
GetOEMCP
GetProcessHeap
GetModuleHandleA
GetLocalTime
shlwapi
PathIsContentTypeA
SHDeleteKeyA
SHGetValueA
PathIsDirectoryA
SHQueryInfoKeyA
SHQueryValueExA
comctl32
ImageList_Remove
ImageList_Write
ImageList_Draw
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetBkColor
ImageList_Create
ImageList_Add
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 545B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc1 Size: 512B - Virtual size: 303B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc2 Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc8 Size: 512B - Virtual size: 483B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc5 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ