Static task
static1
Behavioral task
behavioral1
Sample
ead16f122fd2d51592a7757518410608_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ead16f122fd2d51592a7757518410608_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ead16f122fd2d51592a7757518410608_JaffaCakes118
-
Size
368KB
-
MD5
ead16f122fd2d51592a7757518410608
-
SHA1
96e2b0de1fcd2741307535850e57d5a9b2ab6719
-
SHA256
b3018e950372deac4c6108ddd5214404fcf0dc8b1195c378c58c6d5d2b04edee
-
SHA512
a7aa98a6aebd80bfacfad223440c3f1d21069780e474da93ac46ad0e7258c69dca0d7e5d9c13d86c806048c3440628945f00cfd834a0fcb6117a2ea747b6131c
-
SSDEEP
6144:9VrqfemUuScCyewhwUkog5rjyaOhEBa7/1v7aQHQNJrWnw5+K5xdp6Kyv7WEQmw0:7qN0yeGwUE89FQNZWAxdLyzdQmwSn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ead16f122fd2d51592a7757518410608_JaffaCakes118
Files
-
ead16f122fd2d51592a7757518410608_JaffaCakes118.exe windows:4 windows x86 arch:x86
8adbf303e0853457ebea719d0885132e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
FreeLibrary
GetLastError
QueryPerformanceCounter
HeapDestroy
LeaveCriticalSection
GetLastError
EnterCriticalSection
lstrcmpiW
CreateEventW
UnhandledExceptionFilter
GetTickCount
HeapFree
InterlockedCompareExchange
GetVersionExA
MultiByteToWideChar
GetCurrentProcessId
VirtualProtect
VirtualProtect
VirtualProtect
CreateThread
GetModuleHandleA
LocalFree
CreateThread
CloseHandle
HeapFree
GetModuleFileNameW
GetSystemTimeAsFileTime
DeleteCriticalSection
GetSystemTimeAsFileTime
ReadFile
MultiByteToWideChar
GetModuleHandleW
GetCurrentThreadId
LocalFree
InterlockedCompareExchange
CreateFileW
LocalFree
InterlockedCompareExchange
LoadLibraryA
LocalFree
CreateEventW
LoadLibraryA
GetCurrentThreadId
InterlockedDecrement
UnhandledExceptionFilter
GetProcessHeap
HeapDestroy
CreateFileW
MultiByteToWideChar
GetModuleFileNameA
LeaveCriticalSection
lstrlenA
CreateThread
GetCurrentProcess
EnterCriticalSection
HeapAlloc
LoadLibraryW
VirtualAlloc
HeapDestroy
LeaveCriticalSection
CloseHandle
lstrcmpiW
GetLastError
LoadLibraryW
InterlockedExchange
InterlockedExchange
MultiByteToWideChar
GetModuleFileNameA
DeleteCriticalSection
LocalFree
ReadFile
GetModuleHandleA
GetModuleFileNameA
lstrlenA
DeleteCriticalSection
GetProcAddress
GetSystemTimeAsFileTime
CreateThread
LocalAlloc
GetLastError
lstrcmpiW
Sleep
LocalFree
VirtualProtect
GetCurrentThreadId
GetVersionExA
UnhandledExceptionFilter
InterlockedCompareExchange
QueryPerformanceCounter
SetLastError
DisableThreadLibraryCalls
DisableThreadLibraryCalls
CreateThread
VirtualProtect
lstrlenA
user32
LoadStringW
CharNextW
SetFocus
TranslateMessage
BeginPaint
SetTimer
GetWindowRect
SetWindowLongW
PostMessageW
GetWindowLongW
GetParent
GetWindowRect
LoadStringW
PeekMessageW
TranslateMessage
InvalidateRect
InvalidateRect
DialogBoxParamW
PostMessageW
BeginPaint
IsWindow
PeekMessageW
GetSysColor
SetWindowLongW
GetParent
ShowWindow
GetDesktopWindow
SetFocus
ShowWindow
BeginPaint
GetSystemMetrics
LoadStringW
SetDlgItemTextW
MessageBoxW
PeekMessageW
SetCursor
GetDlgItem
SendMessageW
CharNextW
CharNextW
EndPaint
PostMessageW
GetSysColor
EnableWindow
ReleaseDC
DispatchMessageW
SetDlgItemTextW
GetParent
SetForegroundWindow
LoadCursorW
BeginPaint
SetDlgItemTextW
EndDialog
SetWindowTextW
SetForegroundWindow
SetForegroundWindow
PostQuitMessage
GetDC
PeekMessageW
LoadStringW
CreateWindowExW
GetSysColor
BeginPaint
GetFocus
IsWindow
GetDesktopWindow
KillTimer
LoadIconW
IsWindow
EndPaint
CreateWindowExW
CreateWindowExW
PostMessageW
SetDlgItemTextW
PostQuitMessage
IsWindow
MessageBoxW
IsWindow
ReleaseDC
EndPaint
DialogBoxParamW
BeginPaint
SetTimer
KillTimer
GetDlgItem
ShowWindow
EndDialog
LoadCursorW
GetClientRect
SetFocus
DefWindowProcW
GetParent
CreateWindowExW
BeginPaint
InvalidateRect
EnableWindow
GetSystemMetrics
gdi32
CreateRectRgn
CreateRectRgn
SetTextColor
SetBrushOrgEx
GetCurrentObject
GetBkMode
SetWindowOrgEx
SelectObject
CreateRectRgn
SetWindowExtEx
PatBlt
Polygon
CreateSolidBrush
SetWindowOrgEx
RoundRect
SetPixel
MoveToEx
CreateSolidBrush
Polygon
RoundRect
SetWindowOrgEx
GetBkColor
GetBkMode
GetWindowOrgEx
CreateRectRgn
GetBkMode
BitBlt
SetWindowOrgEx
CreateFontA
SetWindowExtEx
SetBkColor
Ellipse
SetBrushOrgEx
Polygon
SetBkMode
GetWindowOrgEx
BitBlt
SetTextColor
PatBlt
CreateDIBitmap
SelectObject
Rectangle
CreatePen
MoveToEx
Polygon
RoundRect
LineTo
CreateCompatibleDC
BitBlt
CreatePen
CreateBitmapIndirect
SetWindowExtEx
SetBkMode
CreateFontA
Ellipse
GetCurrentObject
SetTextColor
CreateRectRgn
MoveToEx
CreateFontIndirectA
BitBlt
CreatePen
GetWindowExtEx
SetBkColor
CreatePen
CreateCompatibleDC
RoundRect
GetBkColor
PatBlt
Polygon
SetPixel
Polygon
GetBrushOrgEx
GetWindowExtEx
GetBrushOrgEx
Ellipse
BitBlt
Rectangle
CreateBitmap
LineTo
MoveToEx
CreateCompatibleDC
SetPixel
CreateFontA
CreateFontA
CreateFontIndirectA
CreateCompatibleDC
GetPixel
SetWindowExtEx
SetPixel
PatBlt
CreateFontA
SetWindowExtEx
Sections
.text Size: 122KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ