Static task
static1
Behavioral task
behavioral1
Sample
d0477960c8937d0c677c5532c6856cc4_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
d0477960c8937d0c677c5532c6856cc4_JaffaCakes118
-
Size
120KB
-
MD5
d0477960c8937d0c677c5532c6856cc4
-
SHA1
522df81f30f067044a377f73235df98e697f99b3
-
SHA256
7611e7ac8a89bc0a77e47d0a12db3c27811333ead4ad6b33482d0cea7e7bd80e
-
SHA512
1da4aaa1a31176faf0e91b1c9c2ee3e72e766c2cfcdf7ed495ff10da238fffcc2026616a4fedf800eca6f5e3db5be92feb2473b5390ffa356c6c871b6c35b58c
-
SSDEEP
3072:AjNC4MznJFGtPsDNm+FcHiW2U4oRzVVaIkihOa:rnJYz2vxUpXaGOa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0477960c8937d0c677c5532c6856cc4_JaffaCakes118
Files
-
d0477960c8937d0c677c5532c6856cc4_JaffaCakes118.exe windows:4 windows x86 arch:x86
0dc11b176b8eff6fdf84ebc2aefc12e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenUrlA
InternetOpenA
InternetReadFile
InternetCloseHandle
winmm
PlaySoundA
wsock32
connect
WSAStartup
htonl
socket
setsockopt
listen
WSAAsyncSelect
getservbyname
htons
recv
send
accept
gethostname
gethostbyname
closesocket
WSACleanup
bind
kernel32
FreeLibrary
GetSystemInfo
GetLocalTime
LoadLibraryA
Sleep
GetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentThreadId
GetPrivateProfileIntA
ReadFile
WriteFile
CreateFileA
CloseHandle
TerminateThread
CreateThread
Beep
SystemTimeToFileTime
GetSystemTime
GetModuleFileNameA
GetTickCount
LocalFree
GetModuleHandleA
GetStartupInfoA
MultiByteToWideChar
lstrlenA
GlobalMemoryStatus
user32
LoadMenuA
RegisterClassA
DrawTextA
LoadBitmapA
DrawIcon
GetDesktopWindow
ClientToScreen
GetScrollInfo
GetWindowDC
KillTimer
CheckMenuItem
SetCursorPos
ShowScrollBar
PostQuitMessage
FillRect
SetCapture
SetWindowRgn
GetMenu
EnableMenuItem
DestroyWindow
SendDlgItemMessageA
LoadIconA
GetDlgItem
EnableWindow
SetMenu
GetDlgItemTextA
GetWindowTextLengthA
GetParent
InvalidateRect
LoadStringA
SetDlgItemTextA
SetTimer
AttachThreadInput
TranslateMessage
DispatchMessageA
MessageBeep
BeginPaint
GetClientRect
EndPaint
DialogBoxParamA
GetDC
ReleaseDC
ShowWindow
GetWindowRect
ScreenToClient
MoveWindow
GetWindowLongA
GetSysColor
SetWindowTextA
SendMessageA
SetWindowLongA
UpdateWindow
GetWindowThreadProcessId
EndDialog
LoadCursorA
SetCursor
GetMessageA
GetSystemMetrics
SetMenuItemBitmaps
GetWindowTextA
GetClassLongA
CallWindowProcA
ReleaseCapture
IsWindow
SetWindowPos
SetForegroundWindow
PostMessageA
GetClassNameA
GetWindow
LoadImageA
ModifyMenuA
DrawMenuBar
CreateWindowExA
PeekMessageA
DefWindowProcA
SetFocus
gdi32
SetMapMode
GetMapMode
CreateCompatibleBitmap
BitBlt
DPtoLP
SelectObject
CreateCompatibleDC
CreateFontA
SetBkColor
DeleteObject
CreateBitmap
CreateRectRgn
CreateSolidBrush
SetBkMode
SetTextColor
GetDeviceCaps
GetStockObject
TextOutA
SetTextAlign
StretchBlt
GetPixel
CombineRgn
SelectPalette
RealizePalette
GetObjectA
DeleteDC
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
VariantInit
VariantClear
msvcrt
sprintf
exit
_acmdln
__getmainargs
strrchr
isdigit
atoi
strncmp
_initterm
__setusermatherr
_adjust_fdiv
??3@YAXPAX@Z
??2@YAPAXI@Z
toupper
strtol
srand
time
strstr
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit
_ftol
rand
free
malloc
_exit
_stricmp
_XcptFilter
_strnicmp
_itoa
_strcmpi
_CxxThrowException
??1type_info@@UAE@XZ
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE