Static task
static1
Behavioral task
behavioral1
Sample
e1294da70e68796787087ef5bea9468c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1294da70e68796787087ef5bea9468c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1294da70e68796787087ef5bea9468c_JaffaCakes118
-
Size
5.0MB
-
MD5
e1294da70e68796787087ef5bea9468c
-
SHA1
50f9e904d6023151b29f6dd3a021a557cae5e81a
-
SHA256
1553779841dfb54b56a621609415523f1b656d8467117dc2a08a09fc2465f557
-
SHA512
5349ac049378f46d2bc698ab873934938df2916fc18886cd978d365fe3cb7d004ab484b1847ea7bd5d2c7570e3ece44ddb6d56185cba4f4686fffe3df514d731
-
SSDEEP
98304:ejrYv40XRWezcNG51+qi+W1Vv+A+64MRKfPwzixBm07AACKpyguACBRKoe7+TDQX:cbspyQCV2gRKgK7ARguFBRpigDrg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1294da70e68796787087ef5bea9468c_JaffaCakes118
Files
-
e1294da70e68796787087ef5bea9468c_JaffaCakes118.exe windows:5 windows x86 arch:x86
982baf62d2f60f3d8853618680c8b158
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
ExitProcess
Sleep
HeapReAlloc
GetCurrentThreadId
HeapCreate
GetModuleFileNameA
GetStdHandle
LCMapStringA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoW
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
LCMapStringW
SetStdHandle
WriteConsoleA
VirtualFree
VirtualAlloc
CloseHandle
OpenMutexW
LockResource
lstrlenA
lstrcpynA
WriteConsoleW
CreateFileA
FlushFileBuffers
GetConsoleOutputCP
GetCurrentProcess
FlushInstructionCache
GetVersionExW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCommandLineW
lstrcmpW
GetCurrentProcessId
SetLastError
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
lstrcatW
lstrcpynW
lstrcpyW
LoadLibraryW
lstrcmpiW
GetModuleHandleW
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetLastError
WriteFile
lstrlenW
RaiseException
user32
LoadBitmapW
LoadStringA
PostQuitMessage
SetMenu
GetMenu
BeginPaint
GetWindowRect
TranslateAcceleratorW
GetSubMenu
PeekMessageW
PtInRect
EndPaint
CreatePopupMenu
IsMenu
SetWindowsHookExW
GetClassNameW
OffsetRect
CallNextHookEx
CharLowerW
UnhookWindowsHookEx
SystemParametersInfoW
SetRectEmpty
RegisterWindowMessageW
GetSysColorBrush
GetWindowDC
GetMessagePos
WindowFromPoint
MessageBeep
FrameRect
ModifyMenuW
TrackPopupMenuEx
DrawEdge
MonitorFromPoint
GetMonitorInfoW
DrawFrameControl
DrawTextW
SetMenuItemInfoW
FillRect
GetActiveWindow
GetWindowThreadProcessId
IsWindowEnabled
IsWindowVisible
MapWindowPoints
ScreenToClient
PostMessageW
LoadStringW
LoadMenuW
LoadAcceleratorsW
ReleaseCapture
GetFocus
CreateWindowExW
GetSystemMetrics
GetDesktopWindow
InflateRect
GetSysColor
SetFocus
ReleaseDC
GetDC
AdjustWindowRectEx
GetKeyState
SetMenuDefaultItem
CheckMenuRadioItem
EnableMenuItem
AppendMenuW
DeleteMenu
SetCursor
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
CallWindowProcW
GetDlgCtrlID
GetParent
SetCapture
RedrawWindow
InvalidateRect
UpdateWindow
ClientToScreen
GetClientRect
SetWindowPos
SetWindowTextW
SendMessageW
GetClassInfoExW
LoadCursorW
LoadImageW
RegisterClassExW
DestroyWindow
CharNextW
DestroyMenu
DefWindowProcW
IsWindow
ShowWindow
GetWindowLongW
SetWindowLongW
wvsprintfW
RemoveMenu
UnregisterClassA
gdi32
SetViewportOrgEx
SelectObject
CreateCompatibleBitmap
GetStockObject
DeleteObject
Polygon
CreatePen
CreateSolidBrush
DeleteDC
BitBlt
CreateFontIndirectW
GetObjectW
SetBkMode
SetTextColor
SetBrushOrgEx
SetBkColor
PatBlt
CreateBitmap
CreatePatternBrush
CreateDIBSection
CreateCompatibleDC
GetCurrentObject
advapi32
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
ole32
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
oleaut32
VarUI4FromStr
comctl32
ord8
CreateStatusWindowW
ImageList_DrawIndirect
ImageList_Draw
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_AddMasked
ImageList_Create
InitCommonControlsEx
ImageList_GetImageCount
ImageList_Destroy
ImageList_LoadImageW
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ