Static task
static1
Behavioral task
behavioral1
Sample
e2b9bc2b9df69c9817b2b0247043545c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e2b9bc2b9df69c9817b2b0247043545c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e2b9bc2b9df69c9817b2b0247043545c_JaffaCakes118
-
Size
359KB
-
MD5
e2b9bc2b9df69c9817b2b0247043545c
-
SHA1
b9f34acf8cf4326f0519f6025c61f7e00a981521
-
SHA256
5e02f9eb337fa199f0d89267296b27f45836f5e99c97039125f9f0de2971b684
-
SHA512
f5530d4326b2760b175f0a46b2e94afac7797b7306090e95360bd4fc5ec02264b909ea38e2651407b5736b1e16a19adf91afaa151aff5a5476539e6f364d3762
-
SSDEEP
6144:E0bLC5mxx8eYNgOJrIMmFSwL9qhjom0sBe3w:EWuSlYNjrv8SwL9VmTgg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e2b9bc2b9df69c9817b2b0247043545c_JaffaCakes118
Files
-
e2b9bc2b9df69c9817b2b0247043545c_JaffaCakes118.exe windows:5 windows x86 arch:x86
26c250bdf6942e5aec1e6fe97056a48d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetHandleCount
GetModuleFileNameA
GetStdHandle
HeapReAlloc
InitializeCriticalSectionAndSpinCount
VirtualFree
DeleteCriticalSection
HeapFree
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteFile
GetFileType
SetStdHandle
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
FreeEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
GetExitCodeProcess
CreateProcessA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
GetProcessHeap
lstrcpyA
GetFileInformationByHandle
FileTimeToLocalFileTime
CloseHandle
GetModuleHandleA
SetConsoleOutputCP
LocalAlloc
LoadLibraryA
GetLocalTime
GetProcAddress
GetLastError
SetConsoleTitleA
ReadFile
FileTimeToSystemTime
MulDiv
HeapCreate
GetFileAttributesA
SetConsoleCP
CreateEventA
Sleep
CreateFileA
GetEnvironmentStrings
GetUserDefaultLangID
EnumTimeFormatsA
GetModuleHandleW
FreeEnvironmentStringsA
WaitForSingleObject
GetEnvironmentStringsW
LoadResource
FindResourceExW
lstrcpynA
lstrlenA
lstrcmpA
GetFileSize
VirtualAlloc
user32
EndPaint
GetSystemMenu
SetTimer
HideCaret
GetMessageA
ScreenToClient
GetWindowRect
SetActiveWindow
GetDialogBaseUnits
CheckMenuItem
CopyRect
RegisterClassA
GetWindow
MoveWindow
SetCursor
SetDlgItemTextA
GetScrollPos
SetProcessWindowStation
DestroyWindow
GetClassNameA
OpenDesktopA
RegisterClassExA
PostQuitMessage
SendDlgItemMessageA
GetWindowDC
FillRect
GetTopWindow
KillTimer
EndDeferWindowPos
DestroyIcon
DialogBoxParamA
LoadCursorA
FindWindowA
CallWindowProcA
EnableWindow
UpdateWindow
SetWindowTextA
GetSystemMetrics
DrawTextA
GetSubMenu
LoadStringA
DeleteMenu
GetParent
LoadIconA
EnumDisplaySettingsA
IsWindowEnabled
wsprintfA
DrawIcon
FindWindowExA
GetClientRect
CreateMenu
SetFocus
SendMessageA
BeginPaint
GetScrollRange
GetDC
TranslateMessage
GetForegroundWindow
GetMenu
OffsetRect
GetWindowTextA
OpenWindowStationA
GetKeyboardLayout
GetAsyncKeyState
SetWindowLongA
MessageBoxA
InvalidateRect
AppendMenuW
GetWindowLongA
GetWindowTextW
CreateWindowExA
SetScrollPos
ReleaseDC
EnableMenuItem
GetMenuState
GetDlgItem
ScrollWindow
DefWindowProcA
RedrawWindow
GetDesktopWindow
GetSysColor
SetWindowPos
GetCursorPos
EnumChildWindows
ShowWindow
SetMenu
GetSysColorBrush
DrawMenuBar
CreateWindowExW
DispatchMessageA
DeferWindowPos
DefMDIChildProcA
BeginDeferWindowPos
RegisterClassW
gdi32
SetBkColor
ExcludeClipRect
SetBkMode
DeleteObject
SelectObject
SelectClipRgn
CreateCompatibleDC
CreateRectRgnIndirect
LineTo
SetMapMode
Rectangle
CreateFontIndirectA
Ellipse
DeleteDC
CreatePen
SetViewportExtEx
SetTextAlign
GetObjectA
TextOutW
GetStockObject
CreateSolidBrush
TextOutA
SetViewportOrgEx
GetTextExtentPoint32A
SetDeviceGammaRamp
GetDeviceCaps
ExtTextOutW
CreateFontA
BitBlt
GetDeviceGammaRamp
MoveToEx
CreateFontW
SetWindowExtEx
DPtoLP
SetTextColor
comdlg32
GetOpenFileNameA
advapi32
CreateWellKnownSid
GetUserNameA
ConvertSidToStringSidA
shell32
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetFileInfoA
ole32
CoTaskMemFree
CoUninitialize
CoInitializeEx
odbc32
ord24
ord75
wininet
FtpSetCurrentDirectoryA
msvfw32
GetOpenFileNamePreviewA
MCIWndCreateA
avicap32
capGetDriverDescriptionA
winmm
timeGetTime
crypt32
CryptDecodeObject
shlwapi
PathIsSameRootW
PathRemoveBackslashW
StrCmpNIA
comctl32
CreateStatusWindowW
ImageList_Destroy
ImageList_Create
InitCommonControlsEx
ord17
ImageList_ReplaceIcon
opengl32
glScalef
glColor3f
glEnable
glFlush
glClearColor
glShadeModel
glDepthFunc
glClearDepth
glHint
glLoadIdentity
glClear
imm32
ImmSetOpenStatus
ImmIsIME
ImmReleaseContext
ImmGetDescriptionA
ImmGetConversionStatus
ImmGetOpenStatus
ImmGetContext
uxtheme
CloseThemeData
DrawThemeParentBackground
IsThemeActive
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
OpenThemeData
DrawThemeText
IsAppThemed
DrawThemeIcon
GetThemeBackgroundContentRect
Sections
.text Size: 134KB - Virtual size: 133KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 126KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ