Static task
static1
Behavioral task
behavioral1
Sample
d5766c5c84d3f61af694b576ed800119_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d5766c5c84d3f61af694b576ed800119_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5766c5c84d3f61af694b576ed800119_JaffaCakes118
-
Size
31KB
-
MD5
d5766c5c84d3f61af694b576ed800119
-
SHA1
1e2c95ae66ad7bd3602487f88ee6d09fb36764cd
-
SHA256
ff689f722f8c74b3f8b5cb4481be6863cb2531210fc9cd7035144be4518604cc
-
SHA512
6a9b99f3b8f0e07e8ccfd0397469a9f99d0f6adca39ad1a4fd10e76681fbe356271ab71618049a095d3c62ec9c55149be02703cd4f1c1f6d736e28e517e9a904
-
SSDEEP
768:4ciYL5GWo726rOWAdDugImCZXsYD6T5c2qs:XzLu2lnImC5TD6Vd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5766c5c84d3f61af694b576ed800119_JaffaCakes118
Files
-
d5766c5c84d3f61af694b576ed800119_JaffaCakes118.exe windows:4 windows x86 arch:x86
336d79fefea51c16898b17fab1468189
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReplaceFileW
LoadResource
GetCommandLineA
GetEnvironmentStringsA
GetACP
MoveFileW
DisconnectNamedPipe
OpenMutexA
RemoveDirectoryA
OpenWaitableTimerW
GetHandleInformation
GetExpandedNameA
GetLocalTime
GetLongPathNameA
FindResourceA
SetLocaleInfoA
lstrcmpi
ExpandEnvironmentStringsW
EnumDateFormatsW
OpenEventW
GetLongPathNameW
GetVersionExA
GetThreadPriority
GetProcAddress
MulDiv
AddAtomA
LocalAlloc
QueryPerformanceCounter
GetLogicalDriveStringsW
user32
GetKeyboardType
AdjustWindowRect
WinHelpA
IsIconic
PostQuitMessage
GetMenuItemRect
OpenClipboard
RegisterWindowMessageW
wvsprintfA
CreateAcceleratorTableW
WinHelpW
SetWindowLongA
GetMenuItemInfoW
EnumDesktopWindows
DrawIcon
GetMessageW
SendDlgItemMessageW
GetClassLongA
GetWindowTextLengthW
IsChild
GetWindowTextA
EnableMenuItem
TrackPopupMenu
SetDlgItemTextA
DefDlgProcA
GetWindowRect
CreateIcon
LoadImageA
UnregisterClassW
GetDlgItemTextW
UnregisterClassA
GetClientRect
PeekMessageW
ShowCursor
CreateDialogParamA
GetDC
MessageBoxIndirectA
GetDlgItemInt
SetForegroundWindow
DrawTextW
LoadCursorW
LoadCursorA
GetWindowLongA
InsertMenuItemA
GetMenu
CopyIcon
CharPrevW
gdi32
GetViewportExtEx
CreateDCW
EndDoc
GetBkMode
CloseMetaFile
SetMapMode
ResetDCA
SetBkMode
StrokeAndFillPath
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegRestoreKeyA
RegCreateKeyW
RegOpenKeyExW
shell32
SHGetFileInfoW
shlwapi
SHGetValueW
ole32
CoInitialize
CoGetClassVersion
CoCreateGuid
CoDosDateTimeToFileTime
CreateErrorInfo
opengl32
glTexCoord1dv
glDeleteLists
glClear
glIndexf
glStencilOp
wglDescribeLayerPlane
glColorMaterial
glColor4b
glTexCoord1sv
glVertex2f
wsock32
inet_network
listen
WSAIsBlocking
WSACancelAsyncRequest
socket
NPLoadNameSpaces
accept
GetNameByTypeA
ioctlsocket
WSAAsyncGetServByName
getsockopt
gethostname
shutdown
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.gOC Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RDDmMJ Size: 1024B - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fMOcx Size: 1KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.QwZaSh Size: 1KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.GQb Size: 512B - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bwrWj Size: 3KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.h Size: 1024B - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.S Size: 512B - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UsfThv Size: 1KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BqYI Size: 2KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.QhXT Size: 1KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ