Static task
static1
Behavioral task
behavioral1
Sample
e1b465e4b1216e28c300fc35f997285e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e1b465e4b1216e28c300fc35f997285e_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
e1b465e4b1216e28c300fc35f997285e_JaffaCakes118
-
Size
370KB
-
MD5
e1b465e4b1216e28c300fc35f997285e
-
SHA1
c2403ae141df565d23f0426d4d819e907c26a7a6
-
SHA256
c8b0242d2332ea916ea15f09b5e3932b63f6cc8dc9402a47d1e5e4a6419b6b8b
-
SHA512
24d94e653406ad663602049b17473cfcbc5d15f49dd2e07dc624e59418545816592b788e58d603ab3b238d4560c648197a9c6047f0d3809690cc6f02bce9fe88
-
SSDEEP
6144:4FnJoDQG6mZ6c4J6lh3xaU7O1wmiJD9412U57D3WWw8kAE:UJoDRZ6WhB77Og194LPvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b465e4b1216e28c300fc35f997285e_JaffaCakes118
Files
-
e1b465e4b1216e28c300fc35f997285e_JaffaCakes118.exe windows:2 windows x86 arch:x86
d7cbb5ad2a51b01f801a489eea67a559
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
DefWindowProcA
ShowWindow
TranslateMessage
CreateWindowExA
SendMessageA
GetMessageA
DispatchMessageA
UpdateWindow
DestroyWindow
RegisterClassExA
msvcrt
_wcsicmp
_ltow
__wargv
_wtol
__set_app_type
_c_exit
wcscat
__p__commode
__wgetmainargs
_getdcwd
_purecall
_controlfp
_wtoi
free
_wcsdup
_initterm
_CxxThrowException
_adjust_fdiv
wcstok
__CxxFrameHandler
_wsplitpath
__p__fmode
exit
_cexit
_onexit
_exit
wcscmp
wcschr
_XcptFilter
__argc
_itow
_beginthreadex
__setusermatherr
__dllonexit
_except_handler3
rand
_wcmdln
kernel32
VirtualFree
GetFileSize
lstrcatW
GetFileTime
GetCurrentProcessId
lstrlenA
GlobalUnlock
GetLastError
CreateFileW
VirtualAlloc
FreeLibrary
GetFileAttributesW
GlobalFree
LocalAlloc
InterlockedDecrement
CreateDirectoryW
SetUnhandledExceptionFilter
GetACP
MulDiv
LocalFree
GlobalLock
GetLocaleInfoW
lstrlenW
QueryPerformanceCounter
GetModuleHandleA
HeapSize
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetTempPathW
IsDBCSLeadByte
CloseHandle
GetModuleHandleW
GetDateFormatW
GetStartupInfoW
GetCurrentThreadId
SetEndOfFile
FindClose
GetProcessHeaps
InterlockedExchange
GetTimeFormatW
LoadLibraryW
GetCurrentProcess
GlobalAlloc
lstrcpynW
HeapAlloc
GlobalReAlloc
GetExitCodeThread
GetProcessHeap
GetThreadLocale
TerminateProcess
LoadLibraryA
FileTimeToLocalFileTime
RaiseException
GetProcAddress
MultiByteToWideChar
GetNumberFormatW
lstrcmpiW
GetTickCount
FindFirstFileW
GetTempFileNameW
InterlockedIncrement
SetErrorMode
FileTimeToSystemTime
lstrcpyW
lstrcmpW
gdi32
GetBkMode
FillRgn
RoundRect
RealizePalette
CreateDCW
CreateDIBitmap
Polyline
RectVisible
ResizePalette
ExtFloodFill
LineTo
GetDIBColorTable
BitBlt
SetTextAlign
SetViewportExtEx
SetTextColor
RestoreDC
MoveToEx
SelectPalette
CreateDIBSection
CreatePen
ExtTextOutW
CreateHalftonePalette
CreatePatternBrush
CreateBitmap
StretchBlt
GetStockObject
Ellipse
EnumFontFamiliesExW
CreatePalette
CreateCompatibleBitmap
Polygon
GetObjectW
CreateICW
GetCurrentObject
PatBlt
LPtoDP
GetNearestPaletteIndex
TextOutW
SaveDC
CreateCompatibleDC
GetTextExtentPoint32W
SelectObject
SetBrushOrgEx
SetDIBitsToDevice
SetROP2
SetDIBits
StretchDIBits
EnumFontFamiliesW
GetPixel
CreatePolygonRgn
SetDIBColorTable
GetPaletteEntries
GetNearestColor
DeleteDC
CreateRectRgnIndirect
DeleteObject
PolyBezier
Rectangle
CreateFontIndirectW
Escape
SetMapMode
PtVisible
SetBkMode
GetDIBits
TranslateCharsetInfo
SetPaletteEntries
UnrealizeObject
CreateSolidBrush
GetTextMetricsW
GetTextColor
SetBkColor
OffsetRgn
SetStretchBltMode
GetDeviceCaps
PlayMetaFile
SetPixel
Sections
.text Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 174KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ