Static task
static1
Behavioral task
behavioral1
Sample
cfbae77b1fbda9fca772a973590ca193_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
cfbae77b1fbda9fca772a973590ca193_JaffaCakes118
-
Size
238KB
-
MD5
cfbae77b1fbda9fca772a973590ca193
-
SHA1
b7e8a1cadaa206be7d8076893daecdffd7298b4f
-
SHA256
129ea745d66ad855a7ce12dcdd6dd83d115ed95ed8f48279e1d0b671d9fbae7a
-
SHA512
744f4d3380a826edc206ec38f738a629bdec71b925400166d10faf94c5e9cc020196881eb2a21db471b18e7b7354ae1475d98ab8e1f9f50846550c9455a9a43d
-
SSDEEP
3072:ETQrUITGWcAq9EhTIj8COJ6f5gLsYCg3D9IPO5QyE2QWLEPg+D:DrPTGWcj+TIjrGZLsY53q/yEgEPd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cfbae77b1fbda9fca772a973590ca193_JaffaCakes118
Files
-
cfbae77b1fbda9fca772a973590ca193_JaffaCakes118.exe windows:5 windows x86 arch:x86
3ae1436591b8f55eba4a094e317550ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindFirstFileA
GetWindowsDirectoryA
VirtualAlloc
GetVersionExA
FreeLibrary
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetSystemDirectoryA
GetModuleFileNameA
WideCharToMultiByte
SetLastError
CloseHandle
LoadLibraryA
GetProcAddress
GetCurrentProcessId
OpenProcess
GetLastError
Sleep
LocalFree
FindResourceA
lstrlenA
MulDiv
MultiByteToWideChar
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
lstrcmpA
InterlockedExchange
CompareStringA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
GlobalAddAtomA
GlobalReAlloc
lstrcmpW
FreeResource
GlobalFindAtomA
GlobalGetAtomNameA
GetModuleHandleW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
InitializeCriticalSection
TlsAlloc
LoadResource
LocalReAlloc
DeleteCriticalSection
TlsFree
WritePrivateProfileStringA
GlobalFlags
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
CreateFileA
GetCPInfo
GetOEMCP
SetErrorMode
HeapAlloc
RtlUnwind
HeapFree
RaiseException
GetSystemTimeAsFileTime
GetStartupInfoA
HeapReAlloc
ExitProcess
HeapSize
VirtualFree
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LockResource
TlsSetValue
SizeofResource
user32
GetForegroundWindow
GetWindowTextA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
GetClassLongA
GetCapture
WinHelpA
SendDlgItemMessageA
LoadIconA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
ShowWindow
GetDC
ReleaseDC
GetSysColorBrush
LoadCursorA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
BeginPaint
EndPaint
DestroyMenu
UnregisterClassA
EnableWindow
SendMessageA
GetWindowRect
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageA
CheckMenuItem
EnableMenuItem
SetForegroundWindow
UpdateWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindowThreadProcessId
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetDesktopWindow
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
GetSidSubAuthority
OpenProcessToken
RegQueryValueExA
RegCloseKey
shlwapi
PathFileExistsA
PathFindFileNameA
PathFindExtensionA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ