Static task
static1
Behavioral task
behavioral1
Sample
f6222cf7b676f8111019d9074d703315_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6222cf7b676f8111019d9074d703315_JaffaCakes118
-
Size
225KB
-
MD5
f6222cf7b676f8111019d9074d703315
-
SHA1
504ae5b06924cc64e98433ffca91af0063cd987a
-
SHA256
1e4f0b7961e5263683f0624c40b2226eb28227c6ac3f3d0c68b06cb7c7b87d8a
-
SHA512
f1b8f656a2087bd3f866b9a819023ff3a313744f0b1ea97e269644aba5d308b5b0c8bae1e5d91ead6414384e2e56cdc4202eed63f18b2790e197418696645637
-
SSDEEP
3072:B7qbXdqTjK3jI1GwOCLdhDD1EGPwj2xgFOZPweMECwp9v82trM:0u1fF7P4XUN/p9vZrM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6222cf7b676f8111019d9074d703315_JaffaCakes118
Files
-
f6222cf7b676f8111019d9074d703315_JaffaCakes118.exe windows:4 windows x86 arch:x86
3be675a4060b5261084a79c6c67e4405
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CreateEventW
CreateFileA
CreateProcessA
CreateThread
DeleteFileA
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
GetCPInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetDriveTypeA
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileTime
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
GetStringTypeA
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathW
GetThreadLocale
GetUserDefaultLangID
GetVersion
GlobalAlloc
GlobalFindAtomA
GlobalReAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsBadCodePtr
IsBadReadPtr
IsDBCSLeadByte
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LocalAlloc
LocalFileTimeToFileTime
LockResource
MapViewOfFile
MoveFileA
RaiseException
ReleaseMutex
RemoveDirectoryA
ResetEvent
RtlUnwind
SetEnvironmentVariableA
SetFileAttributesA
SetFileAttributesW
SetFileTime
SetThreadLocale
SetThreadPriority
TerminateThread
TlsAlloc
TlsFree
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteFile
lstrcpyA
lstrlenA
lstrlenW
user32
CallNextHookEx
CharLowerA
CheckMenuItem
CreatePopupMenu
DeleteMenu
DialogBoxParamA
DrawFrameControl
DrawIcon
EmptyClipboard
EnableWindow
EndDialog
EnumThreadWindows
GetActiveWindow
GetClassNameA
GetDesktopWindow
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyState
GetKeyboardType
GetLastActivePopup
GetMenuItemCount
GetMenuState
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetTopWindow
GetWindowDC
GetWindowLongA
GetWindowRect
InflateRect
InsertMenuItemA
IsRectEmpty
IsWindowVisible
KillTimer
LoadStringA
MessageBoxA
OemToCharA
PeekMessageA
PtInRect
RedrawWindow
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseDC
RemovePropA
SendMessageA
SetCapture
SetForegroundWindow
SetScrollInfo
SetScrollRange
SetTimer
SetWindowPlacement
SetWindowTextA
SetWindowsHookExA
ShowCursor
ShowWindow
SystemParametersInfoA
TranslateMessage
WaitMessage
WindowFromPoint
gdi32
AddFontResourceA
ArcTo
CloseMetaFile
CombineRgn
CopyMetaFileA
CreateBitmap
CreateDIBSection
CreateDIBitmap
CreateFontIndirectW
CreateFontW
CreateHalftonePalette
CreateICA
CreatePalette
CreateRectRgnIndirect
CreateRoundRectRgn
DPtoLP
EndDoc
EnumFontsA
ExtCreatePen
ExtEscape
FrameRgn
GetCharWidthW
GetCharacterPlacementA
GetDCOrgEx
GetDIBits
GetEnhMetaFileDescriptionA
GetObjectA
GetObjectType
GetOutlineTextMetricsA
GetPixel
GetROP2
GetTextExtentExPointW
GetWindowOrgEx
LineDDA
LineTo
MaskBlt
OffsetWindowOrgEx
PlayMetaFileRecord
Polygon
RealizePalette
Rectangle
RemoveFontResourceA
ScaleWindowExtEx
SetArcDirection
SetBrushOrgEx
SetMapperFlags
SetStretchBltMode
SetTextColor
SetWindowExtEx
StretchDIBits
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE