Static task
static1
Behavioral task
behavioral1
Sample
f03bcc8906dd20f6638391c7cc2fe2a4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f03bcc8906dd20f6638391c7cc2fe2a4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f03bcc8906dd20f6638391c7cc2fe2a4_JaffaCakes118
-
Size
333KB
-
MD5
f03bcc8906dd20f6638391c7cc2fe2a4
-
SHA1
aca50b018628ff27b3fe5d1d8d172c6bab7baa4b
-
SHA256
d5f3203632101dbebc81a64b90b04739445ac19fda6ab082e3b4b4351c566498
-
SHA512
c82efd790d972c0245d821123431317b4ae3dc2a2f9fb12819a22756af77e50902b764adf0eb361a25380285c6928fb8fc2f71ef6523d964925bb1fbc84c15ca
-
SSDEEP
6144:ibJ4vuHa+LLqMKFo+fiivtgZwj1z7H8LTHFJOlInijFE5yWLX:RgraFo+fzvW+jVQTl4lg8MRLX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f03bcc8906dd20f6638391c7cc2fe2a4_JaffaCakes118
Files
-
f03bcc8906dd20f6638391c7cc2fe2a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
e0f41be3cb937dabff34123390991845
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
GlobalAlloc
ExitProcess
GetModuleHandleA
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WinExec
CopyFileA
WriteFile
SetEndOfFile
DeleteFileA
GetVersionExA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
CloseHandle
GetModuleFileNameA
GlobalUnlock
GlobalLock
GetCommandLineA
GetStartupInfoA
QueryPerformanceCounter
GlobalFree
user32
ClientToScreen
GetCursorPos
ScreenToClient
FillRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
SetCursor
EndPaint
BeginPaint
DestroyMenu
CheckMenuItem
InvalidateRect
SetWindowLongA
GetMenu
SetMenu
LoadMenuA
GetCapture
DialogBoxParamA
TrackPopupMenu
GetSubMenu
EnableMenuItem
DefWindowProcA
DestroyWindow
PostQuitMessage
LoadStringA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetWindow
GetDesktopWindow
MoveWindow
EndDialog
GetWindowRect
SetWindowPos
GetDC
ReleaseDC
GetWindowLongA
GetClientRect
WindowFromPoint
gdi32
GetTextMetricsA
CreateFontIndirectA
DeleteObject
SelectObject
StretchDIBits
SetDIBitsToDevice
GdiFlush
CreateCompatibleBitmap
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
BitBlt
RealizePalette
SelectPalette
CreateSolidBrush
GetClipBox
RestoreDC
IntersectClipRect
SaveDC
GetSystemPaletteEntries
ExtTextOutA
CreatePalette
EnumFontFamiliesA
SetBkMode
SetTextColor
SetTextAlign
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyA
RegSetValueA
RegCloseKey
shell32
DragQueryFileA
DragAcceptFiles
winmm
waveOutPrepareHeader
waveOutUnprepareHeader
timeKillEvent
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutReset
timeSetEvent
waveOutOpen
waveOutGetDevCapsA
waveOutClose
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.nkh Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE