Static task
static1
Behavioral task
behavioral1
Sample
e221e6d5901a656f44e6c9f285f06074_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e221e6d5901a656f44e6c9f285f06074_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e221e6d5901a656f44e6c9f285f06074_JaffaCakes118
-
Size
239KB
-
MD5
e221e6d5901a656f44e6c9f285f06074
-
SHA1
9400097b33d7ca80a491b51080f9175f0911fde2
-
SHA256
bbdc8395caf43c261f116c6bbd5d164f22df32d59dfb9eb156952edd76f3f6c0
-
SHA512
8890245044da7e6f80df6178fca200efc1af359de6d44abc16eb0a0ab9d1583c78d58d2607879be09452d461f889fe1cf7b6bca48ebae24aeaefd2b600daa749
-
SSDEEP
6144:SrVHUw6jtl58KG5zj88My81vwMF3MR5e09CnA+:q0w6h8My8h3MR5e4+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e221e6d5901a656f44e6c9f285f06074_JaffaCakes118
Files
-
e221e6d5901a656f44e6c9f285f06074_JaffaCakes118.exe windows:4 windows x86 arch:x86
424bbda2c03a035f9224a296d41c7245
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
LoadStringA
DefMDIChildProcA
SetTimer
GetClassInfoA
EnumChildWindows
MapVirtualKeyA
RegisterWindowMessageA
IsWindowVisible
MessageBoxA
SetMenuItemInfoA
TrackPopupMenu
SetForegroundWindow
DefWindowProcA
SetPropA
GetClipboardData
DestroyIcon
OpenClipboard
FindWindowA
CreateMenu
SetScrollInfo
ShowScrollBar
GetWindowPlacement
SetRect
GetIconInfo
LoadIconA
RemoveMenu
EmptyClipboard
GetFocus
CharLowerA
GetSystemMenu
IsDialogMessageA
CharToOemA
GetWindowLongA
SetWindowLongW
MapWindowPoints
GetMenuState
DestroyCursor
InsertMenuItemA
LoadCursorA
ReleaseCapture
DispatchMessageW
SetClassLongA
UpdateWindow
IsChild
GetKeyboardState
SetCapture
MoveWindow
DeleteMenu
GetParent
FrameRect
SendMessageW
GetClassLongA
CharNextA
SetWindowTextA
AdjustWindowRectEx
DrawFrameControl
SetWindowsHookExA
SetWindowLongA
TranslateMessage
GetDesktopWindow
SetClipboardData
DestroyWindow
GetKeyState
InflateRect
UnregisterClassA
InvalidateRect
GetMenuItemInfoA
RegisterClassA
CreateWindowExA
ChildWindowFromPoint
GetSystemMetrics
ScrollWindow
PeekMessageA
wsprintfA
GetMenuItemCount
GetForegroundWindow
WindowFromPoint
CharUpperBuffA
ActivateKeyboardLayout
SetParent
CallWindowProcA
CallNextHookEx
DrawAnimatedRects
SetActiveWindow
RegisterClipboardFormatA
GetScrollPos
DrawMenuBar
DispatchMessageA
IsWindow
GetWindowTextA
GetCapture
GetMenuItemID
LoadBitmapA
DrawIcon
MsgWaitForMultipleObjects
DrawEdge
SetMenu
GetSysColorBrush
ShowWindow
GetKeyboardLayoutList
DefFrameProcA
EnableScrollBar
TranslateMDISysAccel
OemToCharA
GetLastActivePopup
GetClassNameA
PeekMessageW
EnumThreadWindows
IsRectEmpty
PostMessageA
GetDC
GetKeyboardType
DrawIconEx
SetCursor
FillRect
SystemParametersInfoA
GetScrollRange
GetKeyNameTextA
GetSysColor
GetCursorPos
IsWindowEnabled
GetWindow
ReleaseDC
GetDCEx
IsZoomed
IsDialogMessageW
DestroyMenu
SetWindowPlacement
KillTimer
GetMessagePos
LoadKeyboardLayoutA
CheckMenuItem
InsertMenuA
GetWindowRect
BeginPaint
EnableMenuItem
GetClientRect
CloseClipboard
CharNextW
SetWindowPos
GetMenu
DrawTextA
SetScrollRange
SetScrollPos
CreateIcon
CreatePopupMenu
EndPaint
SendMessageA
OffsetRect
IsWindowUnicode
GetTopWindow
CharLowerBuffA
PtInRect
WaitMessage
GetKeyboardLayout
RedrawWindow
PostQuitMessage
GetCursor
ShowOwnedPopups
GetWindowDC
MessageBeep
EnableWindow
ClientToScreen
EnumWindows
SetFocus
IntersectRect
GetScrollInfo
ScreenToClient
GetActiveWindow
GetWindowThreadProcessId
IsIconic
UnhookWindowsHookEx
GetSubMenu
GetDlgItem
shell32
SHFileOperationA
SHGetSpecialFolderLocation
SHGetFileInfoA
DragQueryFileA
version
VerFindFileA
kernel32
LoadLibraryA
LoadLibraryExA
lstrlenA
GetModuleHandleA
LocalAlloc
ExitThread
GetVersionExA
GlobalAlloc
CloseHandle
ExitProcess
VirtualAlloc
Sections
.text Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ