Static task
static1
Behavioral task
behavioral1
Sample
e1c8ee2cc72e32a600b0dca43dd2b67a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1c8ee2cc72e32a600b0dca43dd2b67a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1c8ee2cc72e32a600b0dca43dd2b67a_JaffaCakes118
-
Size
35KB
-
MD5
e1c8ee2cc72e32a600b0dca43dd2b67a
-
SHA1
15725e97ecf9c77d657a27524c08f403fc2cce3f
-
SHA256
6faa7edbc60d3e5af7be529c9e8d89d0eb0cd0b26b9f7e7c6275747949333746
-
SHA512
2acd13cd6ffb1cc3abd17b10540744e1abce3687e33f13ed50835349dd2b05f4a36f1dbc95c0ef377a07b2520df82971717838b2cfa87826c7bcced91caf3e98
-
SSDEEP
768:1kCv5yRPKc7gf8nANONAXW6nkz2PoJThnYmAanRMaMTI:rGKc7Kc5mkzmMRYKnuaMTI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1c8ee2cc72e32a600b0dca43dd2b67a_JaffaCakes118
Files
-
e1c8ee2cc72e32a600b0dca43dd2b67a_JaffaCakes118.exe windows:5 windows x86 arch:x86
45f558e77fd907575a807df525823f73
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetStartupInfoW
ExitProcess
VirtualAllocEx
FormatMessageW
GetModuleHandleA
HeapFree
GetSystemTimeAsFileTime
CreateThread
GetModuleHandleW
UnhandledExceptionFilter
lstrlenW
TerminateProcess
GetVersionExA
GetCurrentProcessId
GetLastError
InterlockedIncrement
GetCurrentProcess
GetCurrentProcessId
VirtualFree
GetCommandLineW
InterlockedDecrement
VirtualFree
CloseHandle
SetEvent
TerminateProcess
WaitForSingleObject
SleepEx
lstrcmpiW
InterlockedDecrement
GetModuleHandleA
GetTickCount
GetProcessHeap
CreateThread
GetModuleHandleW
GetProcessHeap
SetFilePointer
LocalFree
CreateFileW
GetCurrentProcess
CloseHandle
HeapReAlloc
GetCurrentProcess
GetCurrentProcess
LoadLibraryW
GetVersionExA
CreateFileW
HeapAlloc
HeapAlloc
GetModuleHandleW
GetTickCount
LocalFree
GetCommandLineA
InitializeCriticalSection
GetModuleHandleW
VirtualFree
GetCurrentThreadId
WideCharToMultiByte
UnhandledExceptionFilter
VirtualFree
VirtualFree
GetCurrentThreadId
InterlockedIncrement
GetProcessHeap
gdi32
GetTextMetricsW
BitBlt
GetTextExtentPoint32W
DeleteDC
LineTo
CreateCompatibleDC
MoveToEx
DeleteObject
CreateCompatibleBitmap
ExtTextOutW
SetBkMode
GetTextMetricsW
SetTextColor
LineTo
GetTextMetricsW
DeleteDC
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateCompatibleDC
StretchBlt
CreateCompatibleBitmap
CreateFontIndirectW
CreateSolidBrush
LineTo
BitBlt
CreateBitmap
BitBlt
DeleteObject
GetStockObject
GetTextMetricsW
SetBkMode
SelectObject
GetStockObject
CreateCompatibleDC
MoveToEx
LineTo
SelectObject
GetStockObject
CreateBitmap
SetBkMode
SetBkMode
ExtTextOutW
CreateCompatibleDC
SetBkMode
GetTextExtentPoint32W
GetStockObject
SetBkColor
CreateCompatibleBitmap
PatBlt
SetTextColor
CreateSolidBrush
CreateCompatibleBitmap
StretchBlt
MoveToEx
GetStockObject
SetBkMode
StretchBlt
SetTextColor
GetTextMetricsW
LineTo
DeleteDC
ExtTextOutW
ExtTextOutW
SetBkColor
MoveToEx
GetTextMetricsW
GetObjectW
user32
MessageBeep
GetWindow
MessageBoxW
IsWindow
EndPaint
DestroyIcon
LoadStringA
SetCursor
GetMessageW
GetDC
GetSysColor
PeekMessageW
UpdateWindow
SetCursor
MoveWindow
CreateWindowExW
SetCursor
EndPaint
SetCursor
GetDlgCtrlID
LoadMenuW
SendMessageW
PostMessageW
SetWindowPos
MessageBoxA
SetWindowTextW
GetSystemMenu
GetClientRect
IsDialogMessageW
MapWindowPoints
GetSystemMetrics
LoadMenuW
DrawTextW
CheckDlgButton
DefWindowProcW
LoadStringA
GetClientRect
SetForegroundWindow
GetDlgItem
LoadIconW
GetDlgItemTextW
GetFocus
SetWindowTextW
DestroyWindow
GetDesktopWindow
GetDlgCtrlID
GetSystemMetrics
RegisterClassW
GetDlgItem
DestroyMenu
SetWindowLongW
GetDesktopWindow
GetSystemMetrics
wsprintfA
BeginPaint
GetCursorPos
DestroyMenu
PtInRect
IsDialogMessageW
CallWindowProcW
MoveWindow
LoadImageW
GetDesktopWindow
GetKeyboardState
GetSystemMenu
SetDlgItemTextW
PostQuitMessage
GetMessageW
GetClientRect
ReleaseDC
GetSubMenu
SetCursor
DefWindowProcW
SetWindowTextW
GetDesktopWindow
MessageBoxA
GetClientRect
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ