Static task
static1
Behavioral task
behavioral1
Sample
ea02ec776bb424db4cb09f7d8021e3e7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea02ec776bb424db4cb09f7d8021e3e7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ea02ec776bb424db4cb09f7d8021e3e7_JaffaCakes118
-
Size
185KB
-
MD5
ea02ec776bb424db4cb09f7d8021e3e7
-
SHA1
df184e5c8c791d104ab283b4cccd6a14b4c84e91
-
SHA256
f59df39960ec91ff5abdc9600a32277ad62db54af8f61d7390612f830d7082a3
-
SHA512
a7aa1bdb571a75607a8082983b9090017e95efaef3e4917812e3a699c2c6c383d1bba0cf6d9048ad51964d7817ef1ec50e09fc90be6c87e5ce0407f793ac1ff1
-
SSDEEP
3072:vXgKniLxz9QqQM/VPxQGOSKe0opP9nWD5guwHHjhoxFGU:vgV3tPxZOk0ot9Giuwdo+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea02ec776bb424db4cb09f7d8021e3e7_JaffaCakes118
Files
-
ea02ec776bb424db4cb09f7d8021e3e7_JaffaCakes118.exe windows:4 windows x86 arch:x86
04110e4c80ba0c614f2f43f4782ab872
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ExtTextOutW
GetTextColor
DeleteObject
TextOutW
PtVisible
Escape
DeleteDC
GetDeviceCaps
SetTextColor
RestoreDC
GetViewportExtEx
SetViewportOrgEx
ScaleWindowExtEx
RectVisible
GetBkColor
GetRgnBox
GetMapMode
GetClipBox
CreateBitmap
ExtSelectClipRgn
GetWindowExtEx
OffsetViewportOrgEx
SetViewportExtEx
SelectObject
GetObjectW
SetWindowExtEx
SaveDC
SetMapMode
ScaleViewportExtEx
GetStockObject
SetBkColor
CreateRectRgnIndirect
shell32
SHCreateDirectoryExW
SHGetSpecialFolderPathW
user32
GetTopWindow
EqualRect
MapWindowPoints
GetPropW
InvalidateRgn
GetNextDlgTabItem
LoadIconW
WinHelpW
InvalidateRect
SendDlgItemMessageA
OffsetRect
GetClassInfoW
IsRectEmpty
GetMenu
GetForegroundWindow
CharNextW
SetPropW
IsChild
RegisterClassW
SetForegroundWindow
UpdateWindow
SetActiveWindow
GetClientRect
CharUpperW
CopyAcceleratorTableW
MessageBeep
GetNextDlgGroupItem
RemovePropW
AdjustWindowRectEx
CallWindowProcW
GetMessagePos
IsIconic
GetWindowPlacement
GetClassInfoExW
GetMessageTime
SetRect
CreateWindowExW
RegisterWindowMessageW
IsWindow
DefWindowProcW
GetClassLongW
IntersectRect
DestroyMenu
advapi32
RegEnumKeyW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegQueryValueW
RegCreateKeyExW
RegOpenKeyW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
ole32
StgCreateDocfileOnILockBytes
CoInitialize
CoUninitialize
CoRevokeClassObject
OleInitialize
CoGetClassObject
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleUninitialize
CoFreeUnusedLibraries
CLSIDFromProgID
OleIsCurrentClipboard
CLSIDFromString
oledlg
OleUIBusyW
kernel32
CreateMutexW
RaiseException
InterlockedExchange
GetCalendarInfoA
EnumResourceLanguagesW
GetLocaleInfoA
FreeLibrary
GetSystemDefaultLangID
GetModuleFileNameW
SetFilePointer
LoadResource
GetCurrentProcessId
LocalFileTimeToFileTime
GetThreadContext
GetLocaleInfoW
LoadLibraryW
CreateDirectoryW
SizeofResource
WaitForSingleObject
MultiByteToWideChar
FindResourceW
CreateFileW
ConvertDefaultLocale
DeleteCriticalSection
CloseHandle
ReadFile
SetFileTime
GetVersionExW
LockResource
SystemTimeToFileTime
EnumResourceNamesA
GetModuleHandleW
GetVersion
MoveFileW
WideCharToMultiByte
GetProcAddress
GetCurrentDirectoryW
ExitProcess
WriteFile
VirtualFree
FindClose
InitializeCriticalSection
GetThreadLocale
ReleaseMutex
GetACP
GetFileAttributesW
DeleteFileW
lstrcpyW
RemoveDirectoryW
FindFirstFileW
InterlockedDecrement
lstrcmpiA
FindNextFileW
lstrcmpA
shlwapi
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
comdlg32
GetFileTitleW
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ