Static task
static1
Behavioral task
behavioral1
Sample
d325eef5783df27cdee8482e012bdcfd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d325eef5783df27cdee8482e012bdcfd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d325eef5783df27cdee8482e012bdcfd_JaffaCakes118
-
Size
62KB
-
MD5
d325eef5783df27cdee8482e012bdcfd
-
SHA1
b500af6533ea77a2b11d0dc6f592269f4be5d3e1
-
SHA256
0b7c0cc9e676b5179fa698d4deeee79e727af50ba209874f57cfa3c50029737e
-
SHA512
04cd36eb6a3fd16cc377818526af9b0fe4dd6f40d6d329e8fb7f977c5f137f969851aaff5561782c8415596e9330437e53351c82283efde1528556af6c7436db
-
SSDEEP
768:UorcYdiasGv6MDv+g89SyY7PqyahD6sYKZnPAKZvxgHfrlGl/a+GUGOQWgNOGuw2:7diqLF+SyQqAgnPAKZv6fJGliHZsO2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d325eef5783df27cdee8482e012bdcfd_JaffaCakes118
Files
-
d325eef5783df27cdee8482e012bdcfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c7dbb2b2abe124ad40a9fe8fad5eb9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetPriorityClass
GetCurrentProcess
ResumeThread
GetCurrentThreadId
CreateEventA
SetEvent
GetExitCodeThread
GetStartupInfoA
ExitProcess
GetCommandLineA
InitializeCriticalSection
DeleteCriticalSection
DebugBreak
LocalFree
GetProcessHeap
HeapReAlloc
HeapFree
CreateThread
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
WaitForMultipleObjects
GetFileAttributesA
GetDriveTypeA
lstrcpynA
ReadFile
GetFileSize
GetLastError
CallNamedPipeA
GetUserDefaultLangID
GetTempPathA
EnumResourceNamesA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcmpiA
lstrlenW
SetFileAttributesA
GetModuleHandleA
SetLastError
GetWindowsDirectoryA
GetShortPathNameA
CreateFileA
WriteFile
CloseHandle
DeleteFileA
MoveFileA
GetModuleFileNameA
lstrcpyA
GetTickCount
CopyFileA
LoadLibraryA
GetProcAddress
WideCharToMultiByte
FreeLibrary
lstrlenA
HeapAlloc
lstrcatA
user32
CharNextA
GetKeyboardType
PeekMessageA
MsgWaitForMultipleObjects
wvsprintfA
SetWindowTextA
GetDC
ReleaseDC
GetSysColor
LoadStringA
GetClientRect
LoadCursorA
SetCursor
SetWindowLongA
GetWindowTextA
EndDialog
PostMessageA
UpdateWindow
RedrawWindow
GetDlgItem
EnableWindow
SetForegroundWindow
SendMessageA
SendDlgItemMessageA
GetWindowRect
MapWindowPoints
SetWindowPos
PostQuitMessage
DefWindowProcA
RegisterClassExA
CreateWindowExA
SetTimer
GetMessageA
TranslateMessage
BeginDeferWindowPos
ScreenToClient
DeferWindowPos
EndDeferWindowPos
InvalidateRect
GetSystemMetrics
DispatchMessageA
KillTimer
wsprintfA
LoadImageA
gdi32
GetDeviceCaps
SelectObject
CreateHalftonePalette
DeleteObject
UpdateColors
SetTextColor
CreateFontIndirectA
CreateCompatibleDC
DeleteDC
SelectPalette
RealizePalette
BitBlt
GetObjectA
advapi32
RegFlushKey
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
RegEnumKeyExA
RegDeleteKeyA
RegQueryInfoKeyA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
shell32
ShellExecuteA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
StrRChrA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
oleaut32
SysAllocString
VariantInit
VariantClear
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ