Static task
static1
Behavioral task
behavioral1
Sample
d205c41afd72b25083ebaaa5cdc97d7f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d205c41afd72b25083ebaaa5cdc97d7f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d205c41afd72b25083ebaaa5cdc97d7f_JaffaCakes118
-
Size
450KB
-
MD5
d205c41afd72b25083ebaaa5cdc97d7f
-
SHA1
f38e75f80bd39b6b11315833e2704c796428c538
-
SHA256
789607ecfc0ad8a2f7d3e9f8c32e4fe88d93881acb305a82a6217d519ea19668
-
SHA512
598927747c64c41bdafee457cc95c4ffa664c69195ba64f5bd8ab123bf10ce8365da4048b194982372575915abbb0bf08e243fb08f04220d7b258ea06a96d224
-
SSDEEP
12288:EeGlKB9tOlq+MGphvVpLR2LiC3CcJmPHBJ6wzvP:sgB9clq+MGppDR9CyMmPHX6wzvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d205c41afd72b25083ebaaa5cdc97d7f_JaffaCakes118
Files
-
d205c41afd72b25083ebaaa5cdc97d7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7364d561d323cafa930e162ac11a7ad8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
GetLastError
InterlockedIncrement
GetCurrentThreadId
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
RemoveDirectoryA
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindFirstFileW
CreateFileMappingA
ResetEvent
lstrcpyA
FindNextFileW
CreateProcessA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
SetErrorMode
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
IsBadWritePtr
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
MapViewOfFile
GetVersion
SetEndOfFile
CreateEventW
GetConsoleMode
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
DeleteCriticalSection
CreateThread
SetFilePointer
CreateMutexA
GetLocalTime
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
GetOEMCP
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetExitCodeProcess
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
LoadLibraryW
WideCharToMultiByte
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
ExpandEnvironmentStringsA
LocalAlloc
GetLocaleInfoA
GetCurrentDirectoryA
GetCurrentProcess
HeapAlloc
FreeEnvironmentStringsA
GetCommandLineW
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
TlsFree
GetModuleHandleA
ReadFile
FindFirstFileA
CloseHandle
lstrcpynA
GetACP
GetModuleHandleW
GetDiskFreeSpaceA
InterlockedExchange
SizeofResource
IsValidCodePage
HeapCreate
FindResourceW
VirtualFree
Sleep
FindResourceA
VirtualAlloc
LeaveCriticalSection
GetFullPathNameA
advapi32
RegOpenKeyExW
RegQueryValueExW
RegSetValueExA
RegDeleteValueA
RegSetValueExW
RegCreateKeyExA
RegQueryValueExA
RegCreateKeyExW
RegCloseKey
RegOpenKeyExA
oleaut32
VariantClear
SysFreeString
VariantInit
SysAllocString
SysAllocStringLen
ole32
CoCreateInstance
CoUninitialize
CoInitialize
user32
SetWindowLongA
ReleaseCapture
PostMessageA
IsIconic
GetWindowRect
GetSystemMetrics
KillTimer
BeginPaint
SetFocus
EndPaint
FillRect
CreateWindowExA
GetSubMenu
RegisterClassA
EnableMenuItem
GetWindow
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
LoadCursorA
SetWindowTextA
GetParent
GetMessageA
DestroyWindow
GetActiveWindow
ClientToScreen
GetClientRect
SendMessageA
GetCursorPos
GetDC
PeekMessageA
DispatchMessageA
IsWindow
SetWindowPos
LoadBitmapA
ReleaseDC
PostQuitMessage
DestroyMenu
SetForegroundWindow
LoadIconA
GetDesktopWindow
EndDialog
CheckMenuItem
GetWindowLongA
SetTimer
GetDlgItem
UpdateWindow
ScreenToClient
SetDlgItemTextA
MessageBoxA
GetSysColor
SystemParametersInfoA
PtInRect
IsWindowVisible
wsprintfA
DrawTextA
GetFocus
InvalidateRect
CallWindowProcA
SetCursor
DefWindowProcA
gdi32
SetBkColor
DeleteObject
GetDeviceCaps
CreateFontIndirectA
SetTextColor
CreateCompatibleDC
CreateSolidBrush
SelectObject
msvcrt
_strcmpi
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
Sections
.text Size: 335KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ