Static task
static1
Behavioral task
behavioral1
Sample
e0a20651141a9ca55a8e31e2c9e23f3e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e0a20651141a9ca55a8e31e2c9e23f3e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0a20651141a9ca55a8e31e2c9e23f3e_JaffaCakes118
-
Size
171KB
-
MD5
e0a20651141a9ca55a8e31e2c9e23f3e
-
SHA1
56ea0448e8cd52aef171a26d43a358ea594667fb
-
SHA256
c77d05eb32d9d4356353f4cbcd6164b28e4eb6915e90528c044ea270ce9c6800
-
SHA512
b72e0280998798fe106a1cdaa9cf933bd6269b825b4e68547327a099eae207ff8147d36949bd90200e8e701d49ce5cd17d14572a77131ef1162f78fc788f92e1
-
SSDEEP
3072:Hqp4mZmGMy1Zno8xDExekWVcH8CJeFuKXSAirTmqHlROEET8sRi0uFQTtzB:Kp7VMEZn5VE8YcCJeFuKCAi/mqPOEUXp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0a20651141a9ca55a8e31e2c9e23f3e_JaffaCakes118
Files
-
e0a20651141a9ca55a8e31e2c9e23f3e_JaffaCakes118.exe windows:4 windows x86 arch:x86
81222817b7ab878c4d6d0ccb8266929a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetNextDlgTabItem
GetNextDlgGroupItem
MessageBeep
SetRect
SetActiveWindow
IntersectRect
GetMenu
GetTopWindow
GetMessagePos
InvalidateRect
IsIconic
GetClassLongW
GetClientRect
CallWindowProcW
UpdateWindow
SetPropW
CopyAcceleratorTableW
GetClassInfoExW
SetForegroundWindow
IsWindow
MapWindowPoints
CreateWindowExW
GetWindowPlacement
OffsetRect
RegisterWindowMessageW
GetPropW
LoadIconW
InvalidateRgn
GetClassInfoW
DefWindowProcW
CharNextW
AdjustWindowRectEx
IsChild
GetForegroundWindow
RegisterClassW
CharUpperW
WinHelpW
GetMessageTime
RemovePropW
SendDlgItemMessageA
IsRectEmpty
EqualRect
DestroyMenu
comdlg32
GetFileTitleW
shlwapi
PathRemoveFileSpecW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathFileExistsW
PathAppendW
gdi32
ExtTextOutW
GetClipBox
SetTextColor
ExtSelectClipRgn
TextOutW
DeleteDC
SelectObject
DeleteObject
GetObjectW
OffsetViewportOrgEx
PtVisible
SetWindowExtEx
SetViewportExtEx
GetDeviceCaps
SaveDC
GetStockObject
GetViewportExtEx
GetBkColor
GetWindowExtEx
GetRgnBox
SetViewportOrgEx
ScaleWindowExtEx
SetMapMode
SetBkColor
ScaleViewportExtEx
GetTextColor
GetMapMode
RestoreDC
Escape
CreateBitmap
RectVisible
CreateRectRgnIndirect
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
kernel32
ReadFile
CreateFileW
GetCurrentDirectoryW
FindNextFileW
lstrcpyW
MultiByteToWideChar
GetModuleFileNameW
GetACP
LoadLibraryW
GetCalendarInfoA
lstrcmpiA
SetFilePointer
LockResource
CloseHandle
GetCurrentProcessId
SystemTimeToFileTime
SetThreadContext
GetLocaleInfoA
InterlockedExchange
LoadResource
FindResourceW
WaitForSingleObject
GetThreadLocale
DeleteCriticalSection
EnumResourceLanguagesW
InterlockedDecrement
LocalFileTimeToFileTime
MoveFileW
InitializeCriticalSection
ConvertDefaultLocale
DeleteFileW
EnumResourceNamesA
FindClose
GetVersionExW
VirtualFree
GetModuleHandleW
GetSystemDefaultLangID
GetVersion
FreeLibrary
FindFirstFileW
CreateDirectoryW
ExitProcess
WriteFile
RemoveDirectoryW
SetFileTime
GetLocaleInfoW
SizeofResource
RaiseException
GetProcAddress
CreateMutexW
WideCharToMultiByte
ReleaseMutex
GetFileAttributesW
lstrcmpA
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
ole32
CoGetClassObject
CoCreateInstance
CoInitialize
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
CoUninitialize
CLSIDFromProgID
StgOpenStorageOnILockBytes
OleUninitialize
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CoFreeUnusedLibraries
OleFlushClipboard
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CLSIDFromString
oledlg
OleUIBusyW
advapi32
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyW
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ