Static task
static1
Behavioral task
behavioral1
Sample
e098f3c26402b9faaf98e7c4355ed008_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e098f3c26402b9faaf98e7c4355ed008_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
e098f3c26402b9faaf98e7c4355ed008_JaffaCakes118
-
Size
308KB
-
MD5
e098f3c26402b9faaf98e7c4355ed008
-
SHA1
d6c4c555f2df08791ec19474d2394c7175e42f6d
-
SHA256
f039fdb819c81a40093a61dad4a9d524a4d2dd25b8717c58790f9768221f62ab
-
SHA512
4bf180f5e66e6f5a86930905c793e821f9e7475afd7861b906fad18196fbdfe039fdcb577464573c4c0b897a21256c21ca00d23f1eceda7af4ff3d8526d86f18
-
SSDEEP
6144:yTyPyW0zFCd9jXCcpAdYw/5E0UX0/y/2pN1jR1VwTBH6wT:oy79DwjC0UmRTwTFR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e098f3c26402b9faaf98e7c4355ed008_JaffaCakes118
Files
-
e098f3c26402b9faaf98e7c4355ed008_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e9e22b50808c4dcc51766173b275bfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHSetValueA
PathFindExtensionA
PathFindFileNameA
advapi32
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
kernel32
GlobalAddAtomA
FlushFileBuffers
SetEndOfFile
GetThreadLocale
GlobalGetAtomNameA
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
UnhandledExceptionFilter
IsDebuggerPresent
VirtualAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetFileType
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
GetConsoleCP
GetConsoleMode
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetACP
SetStdHandle
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
RaiseException
LocalAlloc
SetFilePointer
ReadFile
CreateFileA
GetCurrentProcess
GetModuleFileNameA
SetLastError
GetVersionExA
TerminateProcess
CloseHandle
FormatMessageA
LocalFree
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
GetCurrentProcessId
WriteFile
SetUnhandledExceptionFilter
GetSystemTime
GetTimeZoneInformation
GetLastError
lstrlenA
CompareStringA
InterlockedExchange
GetVersion
MultiByteToWideChar
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
TlsAlloc
user32
ClientToScreen
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
UnregisterClassA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
LoadCursorA
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
DestroyWindow
IsWindow
GetDlgItem
GetSystemMetrics
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetDC
ReleaseDC
GetMenuItemCount
GetSubMenu
GetSysColorBrush
DestroyMenu
ShowWindow
SetForegroundWindow
GetMenu
GetForegroundWindow
GetWindow
IsWindowVisible
GetParent
GetClassNameA
GetWindowThreadProcessId
PostMessageA
RegisterWindowMessageA
EnableWindow
GetWindowTextA
GetCursorPos
SetWindowTextA
LoadIconA
GetMessageA
gdi32
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
ExtTextOutA
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
DeleteObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ