Static task
static1
Behavioral task
behavioral1
Sample
fb0d706affbf6c35cbda9fa434878e97_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fb0d706affbf6c35cbda9fa434878e97_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb0d706affbf6c35cbda9fa434878e97_JaffaCakes118
-
Size
498KB
-
MD5
fb0d706affbf6c35cbda9fa434878e97
-
SHA1
d999ebab7899829b43172335a0cf41932e5f80fc
-
SHA256
40a17b2f80d0c6483797cd9c1b61370205c3dedf91d2f8f1d368218aa836e896
-
SHA512
7d1e3dbb47a720b39f950c4cc3e15d863fbc6acced2477da1ba87a7dcbb570ab0147030e652c4f84ce37574577f90257aeb412e0135e6029d09a1b7ba98c14cd
-
SSDEEP
12288:hKAIBUZJmywOb5esHnNXyNL4r4h/49siPFofw0m8vMZ:hKAVcsestiZm45SvyDra
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb0d706affbf6c35cbda9fa434878e97_JaffaCakes118
Files
-
fb0d706affbf6c35cbda9fa434878e97_JaffaCakes118.exe windows:5 windows x86 arch:x86
ec3e884399de1a7a053488acd8434950
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowPos
CreateWindowExA
MoveWindow
PostQuitMessage
wsprintfA
DefWindowProcA
FillRect
ReleaseDC
GetWindowDC
DrawTextA
DispatchMessageA
TranslateMessage
EnableWindow
GetForegroundWindow
SetWindowTextW
OffsetRect
GetSystemMetrics
SetWindowTextA
ShowWindow
DestroyWindow
KillTimer
EndDialog
GetDlgItem
PostMessageA
SendMessageA
SetTimer
MessageBoxW
LoadStringW
LoadStringA
DialogBoxParamW
DialogBoxParamA
SetWindowLongA
GetWindowLongA
CharUpperW
CharUpperA
GetWindowTextA
GetWindowRect
IsWindow
SystemParametersInfoA
CheckDlgButton
IsDialogMessageA
BeginPaint
EndPaint
InvalidateRect
SetFocus
LoadCursorA
LoadIconA
RegisterClassA
MessageBoxA
SetCursor
GetMessageA
PeekMessageA
shell32
SHFileOperationA
SHGetPathFromIDListA
SHBrowseForFolderA
advapi32
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
gdi32
CreateFontA
CreateSolidBrush
DeleteDC
DeleteObject
GetObjectA
CreatePalette
kernel32
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoA
TlsAlloc
TlsSetValue
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetSystemTimeAsFileTime
InterlockedDecrement
GetStringTypeA
IsDBCSLeadByte
GetCPInfo
GetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesW
SetLastError
GetStdHandle
CreateFileW
GetFileType
GetLastError
DosDateTimeToFileTime
FormatMessageA
GlobalAddAtomA
GlobalDeleteAtom
TlsFree
VirtualAlloc
VirtualFree
WinExec
_lcreat
GetStringTypeW
RaiseException
WideCharToMultiByte
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
HeapReAlloc
LCMapStringA
LCMapStringW
InitializeCriticalSection
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoW
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringA
GetCurrentThreadId
DeleteCriticalSection
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
RtlUnwind
IsValidCodePage
CompareStringW
SetEnvironmentVariableA
InterlockedIncrement
_lopen
_lread
GlobalFlags
lstrcmpiA
CloseHandle
SetFileTime
GetFileAttributesA
GetCommandLineA
WriteFile
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
lstrlenA
lstrcpyA
SetEndOfFile
CreateFileA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
ExitProcess
CopyFileA
GetCurrentProcess
GetTickCount
GetModuleFileNameA
Sleep
SetFileAttributesA
CreateDirectoryA
SetCurrentDirectoryA
lstrcatA
MoveFileA
GetFullPathNameA
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 390KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ