Static task
static1
Behavioral task
behavioral1
Sample
f0208b11148bbff0f689fb574830a36a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0208b11148bbff0f689fb574830a36a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0208b11148bbff0f689fb574830a36a_JaffaCakes118
-
Size
420KB
-
MD5
f0208b11148bbff0f689fb574830a36a
-
SHA1
7beb6b18d8a4beefecae283c19b00868fffc5677
-
SHA256
5cf6a21ec0853b49e1462052e73dd3a55bf600def02e76585c25b055d212d274
-
SHA512
8fa7ac6dd26e8bd771c967780dd47764ea7fc9d6ee66221af9834471739a2457d6e5bb72321729cf3b8c0550bfe568a5ff149337771963fafff4b1a96c2fe41c
-
SSDEEP
6144:4HdggWTgUTiHVA7GM/9b2yozgpgajCVAuLkYg99CFEseRiCMoHah:EttiAVASmayozpajm3jE/iHPh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0208b11148bbff0f689fb574830a36a_JaffaCakes118
Files
-
f0208b11148bbff0f689fb574830a36a_JaffaCakes118.exe windows:4 windows x86 arch:x86
6b7d493f73664f30e06869a1bf232519
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetImageCount
ImageList_DrawIndirect
ImageList_DragMove
ImageList_GetDragImage
ImageList_SetDragCursorImage
CreatePropertySheetPageA
CreateUpDownControl
DrawInsert
ImageList_Create
ImageList_LoadImage
CreatePropertySheetPage
ImageList_Write
_TrackMouseEvent
InitCommonControlsEx
ImageList_EndDrag
kernel32
lstrcpyW
SetConsoleCtrlHandler
TlsGetValue
FreeEnvironmentStringsW
HeapCreate
IsDebuggerPresent
GetStartupInfoW
GetConsoleMode
GetLastError
CompareStringW
GetConsoleOutputCP
TlsSetValue
IsValidCodePage
SetHandleCount
GetSystemTimeAsFileTime
EnterCriticalSection
HeapFree
GetEnvironmentStrings
VirtualFree
QueryPerformanceCounter
WriteConsoleA
GetStartupInfoA
GetCommandLineA
EnumSystemLocalesA
GetModuleHandleA
LoadLibraryA
IsValidLocale
SetEnvironmentVariableW
GetStdHandle
GetOEMCP
SetFilePointer
GetFileType
Sleep
CloseHandle
VirtualQuery
GetUserDefaultLCID
GetProcessHeap
LocalCompact
GetProcAddress
VirtualAlloc
GetLocaleInfoA
GetCurrentThread
LeaveCriticalSection
WideCharToMultiByte
GetCPInfo
CreateMutexA
GetStringTypeW
InterlockedDecrement
GetLocaleInfoW
HeapAlloc
SetLastError
GetTimeZoneInformation
CreateFileA
VirtualFreeEx
RtlUnwind
HeapDestroy
GetCurrentProcessId
GetModuleFileNameW
GetTimeFormatA
GetCurrentThreadId
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
GetEnvironmentStringsW
TlsFree
ReadFile
FreeEnvironmentStringsA
TerminateProcess
GetCurrentProcess
SetEnvironmentVariableA
LCMapStringW
ExitProcess
WriteConsoleW
UnhandledExceptionFilter
GetTickCount
LCMapStringA
GetStringTypeA
HeapSize
HeapReAlloc
GetConsoleCP
GetCommandLineW
OpenMutexA
GetVersionExA
FlushFileBuffers
GetACP
WriteFile
MultiByteToWideChar
GetSystemTime
TlsAlloc
InterlockedExchange
InterlockedIncrement
SetUnhandledExceptionFilter
GetDateFormatA
CompareStringA
SetStdHandle
GetModuleFileNameA
user32
DdeGetLastError
ChangeDisplaySettingsExW
DrawCaption
SetProcessDefaultLayout
MessageBoxA
GetWindowModuleFileNameW
SendMessageTimeoutA
DdeCreateStringHandleA
GetSystemMetrics
ShowWindow
CreateDialogIndirectParamW
RegisterClassA
SendMessageW
GetClassWord
GetWindowModuleFileNameA
GetInputDesktop
SystemParametersInfoW
GrayStringA
DdeDisconnectList
PostMessageA
IsCharLowerA
MapWindowPoints
GetDesktopWindow
DestroyWindow
EndTask
DefWindowProcA
DlgDirSelectComboBoxExA
AnyPopup
DlgDirListA
EnumDisplaySettingsW
CharUpperA
CreateWindowStationA
GetMenuItemRect
RegisterClassExA
CharLowerBuffA
OemKeyScan
UnregisterDeviceNotification
SetCapture
GetDlgItemTextA
IsCharAlphaW
InternalGetWindowText
CreateWindowExW
LoadKeyboardLayoutW
ReleaseDC
EqualRect
GetKeyState
DdeKeepStringHandle
CloseDesktop
RegisterDeviceNotificationW
SetRectEmpty
SetWindowLongW
LoadCursorW
CreateCaret
GetClipboardFormatNameW
InSendMessage
GetTabbedTextExtentA
CreateIconFromResourceEx
comdlg32
LoadAlterBitmap
ReplaceTextA
PageSetupDlgA
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ