Static task
static1
Behavioral task
behavioral1
Sample
df88e038555de9f5c1f5f5c517c2c8c8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df88e038555de9f5c1f5f5c517c2c8c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
df88e038555de9f5c1f5f5c517c2c8c8_JaffaCakes118
-
Size
432KB
-
MD5
df88e038555de9f5c1f5f5c517c2c8c8
-
SHA1
048c2f75730f1f729449d8f6b9415f497a30ec9b
-
SHA256
ea26719f7ced9129721ccfc25a3a96bb96ecac18849bb69572345bab52a37d04
-
SHA512
9d724322b0d00a85977c2f510dd97525239b720be90ca35ba0a7b681a0c442af294678ade5b94f7f99f0420bd56953630131f60385d5673996532fa318d365ea
-
SSDEEP
12288:dKiWJMn0ABTBPttbPrCq/tlENrJFpmn0:1ESBPttLtlcz20
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df88e038555de9f5c1f5f5c517c2c8c8_JaffaCakes118
Files
-
df88e038555de9f5c1f5f5c517c2c8c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
d2d09ec4073190318c80625c9ae40825
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
GetDCBrushColor
GetFontLanguageInfo
GetNearestColor
GetNearestPaletteIndex
GetPixelFormat
GetPolyFillMode
GetTextCharacterExtra
SetSystemPaletteUse
SetTextAlign
SetTextCharacterExtra
SetTextColor
kernel32
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FindResourceA
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileTime
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetVersion
GlobalAlloc
GlobalHandle
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
MoveFileA
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
_fcvt
_fgetwchar
_fpclass
_fputwchar
_gcvt
_itoa
_ltoa
_searchenv
_strdup
_stricoll
_strlwr
_strnicmp
_strset
_swab
_tempnam
_write
__getmainargs
__mb_cur_max
__p__daylight
__p__environ
__p__fmode
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__set_app_type
_cexit
_chgsign
_ctime64
_errno
_filbuf
_findclose
_findfirst
_findnext
_finite
_flsbuf
_fputchar
_fsopen
_fullpath
_getws
_iob
_isctype
_isnan
_itoa
_itow
_localtime64
_logb
_ltoa
_makepath
_memccpy
_onexit
_putenv
_setmaxstdio
_setmode
_sleep
_snprintf
_stat64
_strcmpi
_strdate
_strdup
_stricmp
_stricoll
_strlwr
_strncoll
_strset
_strtime
_time64
_tzset
_ultoa
_ultow
_unlink
_wcsnset
_wctime64
_wfullpath
_wmakepath
_wputenv
_wremove
_wsystem
abort
atexit
atoi
calloc
clock
difftime
exit
fclose
fflush
fgetpos
fgets
fgetwc
fmod
fopen
fputc
fputs
fputwc
fputws
free
freopen
fscanf
ftell
fwprintf
fwrite
fwscanf
getenv
gets
isspace
localeconv
malloc
mblen
mbstowcs
mbtowc
memchr
memcmp
memcpy
memmove
memset
rand
realloc
setlocale
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strerror
strlen
strncpy
strstr
strtod
strtok
tmpnam
tolower
vfprintf
wcslen
wcstombs
user32
CallWindowProcA
CheckDlgButton
DrawTextA
EndDialog
EndPaint
GetDC
GetDialogBaseUnits
GetDlgItem
GetDlgItemInt
GetForegroundWindow
GetInputState
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetPropA
GetQueueStatus
GetScrollPos
GetWindowContextHelpId
GetWindowDC
GetWindowLongA
IsWindowUnicode
LoadIconA
MoveWindow
PostMessageA
RemovePropA
SetDlgItemTextA
ShowWindow
WindowFromDC
Sections
.text Size: 318KB - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE