Static task
static1
Behavioral task
behavioral1
Sample
d2a65f5bcd35a551de241ff7db55ee10_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2a65f5bcd35a551de241ff7db55ee10_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2a65f5bcd35a551de241ff7db55ee10_JaffaCakes118
-
Size
391KB
-
MD5
d2a65f5bcd35a551de241ff7db55ee10
-
SHA1
4037d2c5d08dcf5e9dbad74b577cbab419335a99
-
SHA256
b6de4fd78f2f9ba6ab981d4edc5a820b8a23bd8a5fd7cf9188f18168d94154db
-
SHA512
492b078f31dd41b46a58fdc938d391e283e7a2f50a7a514497926ad2c68f426bda91459dcba5fddc07d18e2216c632d6561fa4deb28f1d570bd656d0c3b1c4b3
-
SSDEEP
6144:eKlxj6JdZmaWtWRdoyI8wpvZiKbWbRBl7wbn4K3nPZKp/HVz3Mlw:jxj6JdZmoPI8wfiKabRPcn4kxc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2a65f5bcd35a551de241ff7db55ee10_JaffaCakes118
Files
-
d2a65f5bcd35a551de241ff7db55ee10_JaffaCakes118.exe windows:4 windows x86 arch:x86
cd2ab712319f725e32fc034e8f577215
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlUnescapeW
PathFindExtensionW
PathRemoveFileSpecW
comctl32
ImageList_Add
ImageList_Draw
ImageList_Replace
CreateStatusWindowW
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
InitCommonControlsEx
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_LoadImageW
shell32
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
kernel32
lstrcmpiW
lstrlenA
LeaveCriticalSection
GetThreadLocale
GetStringTypeExW
InitializeCriticalSection
WriteFile
InterlockedIncrement
EnterCriticalSection
FileTimeToLocalFileTime
CompareFileTime
GetFileSize
WideCharToMultiByte
WaitForSingleObject
FindClose
GetFullPathNameW
FindFirstFileW
FindNextFileW
SetFilePointer
HeapAlloc
HeapReAlloc
HeapFree
GetVersionExA
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetModuleHandleA
ExitProcess
GetStdHandle
OutputDebugStringW
HeapSize
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedCompareExchange
IsProcessorFeaturePresent
SetEndOfFile
DeleteCriticalSection
DebugBreak
MulDiv
FreeLibrary
GetModuleFileNameW
SystemTimeToFileTime
RaiseException
LoadLibraryExW
LockResource
lstrcpyW
SetLastError
FindResourceW
CreateThread
LoadResource
GetTimeFormatW
SizeofResource
GetDateFormatW
GetLastError
GetCurrentProcessId
FileTimeToSystemTime
GetVersionExW
FlushInstructionCache
GetModuleHandleW
GetCurrentProcess
CloseHandle
lstrcmpW
CreateFileW
lstrlenW
MultiByteToWideChar
InterlockedDecrement
LoadLibraryW
GetCurrentThreadId
ReadFile
GetProcAddress
GetModuleFileNameA
VirtualQuery
user32
DestroyWindow
SetWindowsHookExW
SetRectEmpty
DrawFrameControl
SetWindowPos
PostMessageW
CallWindowProcW
CopyRect
IsMenu
LoadCursorW
InvalidateRect
SetWindowTextW
DestroyMenu
GetSysColor
DrawEdge
IsWindowVisible
EndDeferWindowPos
DialogBoxParamW
MessageBeep
SystemParametersInfoW
SetMenuDefaultItem
DeferWindowPos
wvsprintfW
SetWindowPlacement
BeginDeferWindowPos
IsWindowEnabled
GetSysColorBrush
TrackPopupMenu
GetMenuItemCount
GetKeyState
DestroyCaret
EnableMenuItem
EndDialog
GetClassNameW
SetDlgItemTextW
GetWindowTextW
GetWindowPlacement
GetMenuItemInfoW
RegisterClassExW
DispatchMessageW
BeginPaint
TrackPopupMenuEx
SetWindowLongW
SetMenuItemInfoW
LoadImageW
TranslateMessage
GetMonitorInfoW
GetWindowDC
ShowWindow
GetClassInfoExW
SetRect
GetMessageW
EndPaint
MonitorFromPoint
GetParent
SendMessageW
GetWindowLongW
wsprintfW
SetScrollInfo
GetSubMenu
SetCursor
GetDlgCtrlID
ReleaseDC
UpdateWindow
SetCapture
PeekMessageW
MapWindowPoints
PtInRect
InflateRect
MapVirtualKeyW
GetKeyNameTextW
CharUpperW
UnregisterClassA
ModifyMenuW
OffsetRect
GetDlgItem
DrawTextW
LoadStringW
FillRect
SetFocus
CreateWindowExW
GetWindowRect
FrameRect
CallNextHookEx
GetCapture
SetScrollPos
GetSystemMetrics
GetFocus
GetScrollInfo
IsWindow
CreateDialogParamW
MessageBoxW
GetActiveWindow
RemoveMenu
SetMenu
AppendMenuW
CreatePopupMenu
ScrollWindowEx
GetMenu
GetDlgItemTextW
PostQuitMessage
DefWindowProcW
MoveWindow
LoadAcceleratorsW
EnableWindow
CharNextW
LoadMenuW
LoadStringA
DestroyCursor
GetWindowThreadProcessId
GetCursorPos
GetDC
ScreenToClient
DrawFocusRect
GetWindow
GetClientRect
UnhookWindowsHookEx
CharLowerW
WindowFromPoint
ReleaseCapture
GetMessagePos
RegisterWindowMessageW
gdi32
SetBrushOrgEx
DeleteObject
SetBkColor
CreateFontIndirectW
GetTextExtentPoint32W
CreateFontW
LineTo
CreateCompatibleBitmap
DeleteDC
CreateDIBitmap
SetTextColor
SetBkMode
SetViewportOrgEx
CreateDIBSection
SelectObject
CreateCompatibleDC
CreateBitmap
CreatePen
MoveToEx
BitBlt
GetStockObject
CreatePatternBrush
GetObjectW
PatBlt
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegDeleteKeyW
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
CoTaskMemRealloc
CoInitialize
oleaut32
VarUI4FromStr
Sections
.text Size: 305KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ