Static task
static1
Behavioral task
behavioral1
Sample
de64594a6b8d82bdc1397968a1295143_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de64594a6b8d82bdc1397968a1295143_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
de64594a6b8d82bdc1397968a1295143_JaffaCakes118
-
Size
387KB
-
MD5
de64594a6b8d82bdc1397968a1295143
-
SHA1
2c0c08d1e5f678445d2eb1f5b8edc3fc6b22a9d1
-
SHA256
080576560f14fce6a3a1e169ade69b413c9c5a848310e13121953368e3395c7f
-
SHA512
fc3893eb18ca7237d49b941ffdfd8e206f990424c7971aabbf48f92d9f5faee1641bf3c691342f25e176bffe5b30870a79666a4776e05bbda4e16ac28851e43a
-
SSDEEP
6144:i3M6yuJ/qHiYY6KEQh/bk+XnEzybn4F6Tvt+z7MsnYWN0NTZ:Zi/qCYY6KEQh/genau8nYvNTZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de64594a6b8d82bdc1397968a1295143_JaffaCakes118
Files
-
de64594a6b8d82bdc1397968a1295143_JaffaCakes118.exe windows:5 windows x86 arch:x86
e3ec77b9e0b3ee069212b062b4a929bb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
GetNearestPaletteIndex
SetPaletteEntries
EnumFontFamiliesExW
SetDIBits
SelectPalette
TranslateCharsetInfo
SetStretchBltMode
Polygon
RectVisible
SetTextAlign
MoveToEx
UnrealizeObject
CreateBitmap
SaveDC
GetObjectW
SetBkMode
GetNearestColor
GetDIBColorTable
StretchBlt
CreateSolidBrush
GetDeviceCaps
GetTextExtentPoint32W
RealizePalette
CreateHalftonePalette
SetViewportExtEx
GetStockObject
StretchDIBits
LineTo
Polyline
SetDIBitsToDevice
GetPixel
FillRgn
SetDIBColorTable
LPtoDP
CreatePalette
GetTextMetricsW
PolyBezier
SetROP2
ExtFloodFill
CreatePen
SetTextColor
Rectangle
SelectObject
CreateRectRgnIndirect
CreatePatternBrush
Ellipse
CreateFontIndirectW
CreateDIBitmap
SetPixel
PlayMetaFile
OffsetRgn
RestoreDC
GetDIBits
GetPaletteEntries
CreateICW
user32
DrawTextW
RemoveMenu
GetWindowDC
EnableMenuItem
IsWindow
EnableWindow
SetRect
LoadCursorW
SetActiveWindow
GetUpdateRect
IntersectRect
TabbedTextOutW
WinHelpW
GetDesktopWindow
SetRectEmpty
GetDC
GetDlgItem
GetCaretPos
DestroyWindow
GetSystemMetrics
CheckDlgButton
CharNextW
GetWindowLongW
GetMenu
ShowCursor
KillTimer
MessageBoxW
IsMenu
UpdateWindow
TranslateMessage
FillRect
GetFocus
ReleaseDC
GetCursorPos
GetKeyboardLayout
FrameRect
GetWindowRect
GetKeyState
DestroyCaret
CreateCaret
ShowCaret
BeginPaint
SendMessageW
SetCursor
MessageBeep
LoadBitmapW
HideCaret
SetWindowTextW
wvsprintfW
EqualRect
IsRectEmpty
ScreenToClient
GetSubMenu
PtInRect
SetCaretPos
PeekMessageW
LoadStringW
IsWindowVisible
CopyRect
CheckMenuItem
SetWindowLongW
WindowFromPoint
EnableScrollBar
GetParent
ReleaseCapture
ValidateRect
IsClipboardFormatAvailable
EndPaint
SystemParametersInfoW
SetClassLongW
DestroyIcon
InvalidateRect
GetWindow
PostMessageW
SendDlgItemMessageW
InflateRect
kernel32
LoadLibraryW
CreateDirectoryW
SetUnhandledExceptionFilter
SetErrorMode
UnhandledExceptionFilter
lstrcatW
VirtualAlloc
GetCurrentProcessId
GlobalFree
GetTimeFormatW
GetFileSize
GetLocaleInfoW
lstrlenA
GlobalUnlock
lstrcpynW
lstrcmpiW
CreateFileW
LocalFree
GetFileTime
GetSystemTimeAsFileTime
GlobalLock
GlobalReAlloc
MultiByteToWideChar
VirtualFree
QueryPerformanceCounter
GetModuleHandleA
RaiseException
GetExitCodeThread
GetTickCount
GetModuleHandleW
GetTempPathW
GetProcAddress
GetStartupInfoW
GlobalAlloc
TerminateProcess
lstrcpyW
InterlockedIncrement
HeapSize
CloseHandle
LocalAlloc
GetProcessHeap
lstrlenW
HeapAlloc
InterlockedDecrement
GetProcessHeaps
GetCurrentThreadId
lstrcmpW
gdiplus
GdipGetPropertySize
GdipCreateBitmapFromFile
GdipCloneImage
GdipGetImageDecoders
GdipGetImageRawFormat
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToStream
GdipGetAllPropertyItems
GdipGetImageDecodersSize
GdipFree
ole32
OleGetClipboard
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitialize
CoTaskMemFree
ReleaseStgMedium
CoGetInterfaceAndReleaseStream
WriteFmtUserTypeStg
PropVariantClear
Sections
.text Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 201KB - Virtual size: 800KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ