Static task
static1
Behavioral task
behavioral1
Sample
ea73e5ad5a951d45fe711db92af0151f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea73e5ad5a951d45fe711db92af0151f_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
ea73e5ad5a951d45fe711db92af0151f_JaffaCakes118
-
Size
983KB
-
MD5
ea73e5ad5a951d45fe711db92af0151f
-
SHA1
8d4065596be62df6d21a6287987865963e357583
-
SHA256
9730a072e07ac39721b8c0b9b4a4794990acdfb3e4bfa730b0cddda75e4d5236
-
SHA512
9dec457c25ef16f6fd33eeb4114fefd6138e9e74d90ee9e8fe77968538ca5c183c3d45c5d419708f34e46f4e32032556532612a1dfa762ec62c2f04d37fae15c
-
SSDEEP
24576:sscRt/x8dyw7iLmDPqmTIbwzXJw371QRWMhx:sHlYyw7q0Po0zKQRWS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea73e5ad5a951d45fe711db92af0151f_JaffaCakes118
Files
-
ea73e5ad5a951d45fe711db92af0151f_JaffaCakes118.exe windows:4 windows x86 arch:x86
a5b68e07617a6cfaeab3f2b4ec67f0fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
ExitProcess
TerminateProcess
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
GetCommandLineA
RaiseException
ExitThread
HeapSize
HeapReAlloc
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
HeapDestroy
HeapCreate
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
InterlockedExchange
SetEndOfFile
FlushFileBuffers
WritePrivateProfileStringA
FindResourceExA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalAlloc
lstrcmpA
GetCurrentThread
VirtualProtect
GlobalFree
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FindResourceA
WriteConsoleA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
MultiByteToWideChar
WaitForSingleObject
GetStartupInfoA
CreateThread
LocalFree
SetConsoleCtrlHandler
GetProcessShutdownParameters
SetProcessShutdownParameters
GetEnvironmentVariableA
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
GetWindowsDirectoryA
SetThreadExecutionState
CreateMutexA
GetProcAddress
GetModuleHandleA
GetConsoleCP
SetConsoleOutputCP
GetCurrentProcess
SetProcessAffinityMask
AllocConsole
GetStdHandle
DeviceIoControl
GetVersionExA
GetCurrentDirectoryA
GetLastError
Sleep
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetFileSize
VirtualFree
CloseHandle
user32
LoadBitmapA
GetMenuCheckMarkDimensions
ClientToScreen
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetCursorPos
ValidateRect
GetActiveWindow
GetAsyncKeyState
MapDialogRect
CreateDialogIndirectParamA
EndDialog
WindowFromPoint
SetCursor
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
EnableMenuItem
GetNextDlgTabItem
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
LoadIconA
MapWindowPoints
GetFocus
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
CopyRect
IsWindowVisible
GetTopWindow
GetMenuState
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetSystemMetrics
UnregisterClassA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
DestroyWindow
SendDlgItemMessageA
CreateDialogParamA
MessageBoxA
wsprintfA
LoadStringA
SystemParametersInfoA
BlockInput
ExitWindowsEx
DefWindowProcA
RegisterClassExA
ShowWindow
PeekMessageA
PostQuitMessage
PostMessageA
KillTimer
SetTimer
UpdateWindow
ScreenToClient
ChildWindowFromPoint
GetWindowRect
SendMessageA
MessageBeep
EnableWindow
InvalidateRect
InflateRect
IsRectEmpty
GetClientRect
GetSysColor
CreateWindowExA
ModifyMenuA
SetMenuItemBitmaps
GetCapture
CheckMenuItem
GetMessageA
TranslateMessage
DispatchMessageA
GetClassLongA
gdi32
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
SetViewportOrgEx
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
EnumFontFamiliesExA
SetMapMode
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
Rectangle
CreatePen
CreateSolidBrush
CreateCompatibleDC
BitBlt
CreateCompatibleBitmap
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
OpenSCManagerA
RegSetValueExA
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCloseKey
DeleteService
ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
RegOpenKeyExA
shell32
ShellExecuteA
comctl32
PropertySheetA
DestroyPropertySheetPage
ord17
CreatePropertySheetPageA
Sections
.text Size: 212KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ