Static task
static1
Behavioral task
behavioral1
Sample
f6d58daf2c6b25413158b28a987d324a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f6d58daf2c6b25413158b28a987d324a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f6d58daf2c6b25413158b28a987d324a_JaffaCakes118
-
Size
48KB
-
MD5
f6d58daf2c6b25413158b28a987d324a
-
SHA1
7874c830c280a3157c3d57f53f037fa17c95d1a9
-
SHA256
2ba389be931582e249e4bbccdf764027411049b25d1b2fbcaf62a49c2b05f5b1
-
SHA512
9a15ff59756056dc4d32cb79c52a3366e8fb803d93d0a94426de097d4bcf8ff5cb482f47fc3583bbb8849de4cb0ca8f66db7a271ce0cb1079609b1bf1a446062
-
SSDEEP
768:csEY1LIQwv0I0F+TDnkWnUaBVXnif8q27qTVyfjlPfv:nfpF+vkOB3iEEyx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6d58daf2c6b25413158b28a987d324a_JaffaCakes118
Files
-
f6d58daf2c6b25413158b28a987d324a_JaffaCakes118.exe windows:5 windows x86 arch:x86
350ff8c9759b222d2f93776f3b944b46
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
HeapFree
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
HeapCreate
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
GetLocaleInfoA
VirtualProtect
GetSystemInfo
VirtualQuery
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetProcAddress
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetVersionExW
CreateMutexW
GetLastError
ReleaseMutex
CloseHandle
GetCurrentProcessId
ProcessIdToSessionId
CreateEventW
CreateThread
WaitForSingleObject
SetEvent
ExitThread
InterlockedDecrement
InterlockedIncrement
LCMapStringA
gdi32
GetObjectW
CreateDIBitmap
GetRegionData
ExtCreateRegion
CombineRgn
CreateRoundRectRgn
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
FrameRgn
CreatePatternBrush
CreateDIBSection
GetStockObject
CreateSolidBrush
CreateRectRgn
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetStretchBltMode
StretchBlt
DeleteObject
BitBlt
DeleteDC
GetDIBits
user32
SetWindowLongW
DefWindowProcW
GetWindowLongW
RegisterClassW
RegisterHotKey
GetSystemMetrics
UnregisterHotKey
GetParent
SetWindowTextW
SendMessageW
DrawFocusRect
FrameRect
GetSysColor
OffsetRect
DrawIconEx
FillRect
SetRect
GetDC
PostQuitMessage
UnhookWindowsHookEx
CreateWindowExW
DestroyWindow
KillTimer
RedrawWindow
SendInput
MapWindowPoints
SetRectEmpty
EqualRect
GetForegroundWindow
InvalidateRect
GetKeyState
SetFocus
CopyRect
InflateRect
SetWindowPos
CallNextHookEx
MessageBoxW
LoadStringW
SetWindowsHookExW
GetWindowTextW
SetTimer
CreateDialogParamW
EnumWindows
DispatchMessageW
TranslateMessage
GetMessageW
ClientToScreen
ShowWindow
LoadIconW
GetClassLongW
SendMessageTimeoutW
IsWindow
GetWindowDC
GetWindowRect
PrintWindow
ReleaseDC
BeginPaint
GetClientRect
EndPaint
GetWindowRgn
GetAsyncKeyState
SetWindowRgn
IsHungAppWindow
SwitchToThisWindow
InternalGetWindowText
comctl32
ImageList_Create
ImageList_Destroy
DrawShadowText
ord334
ord328
ord329
ImageList_Add
msimg32
AlphaBlend
GradientFill
uxtheme
CloseThemeData
GetThemeBackgroundRegion
OpenThemeData
DrawThemeBackground
wtsapi32
WTSRegisterSessionNotification
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE