Static task
static1
Behavioral task
behavioral1
Sample
f9879420ae6a9838cfd774f7bb0a2518_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f9879420ae6a9838cfd774f7bb0a2518_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9879420ae6a9838cfd774f7bb0a2518_JaffaCakes118
-
Size
464KB
-
MD5
f9879420ae6a9838cfd774f7bb0a2518
-
SHA1
7defdc88ed66edffadb75986f4b05d87f477e291
-
SHA256
884686ce9f41bf6eb699d1b502ff7e1a4cfddad8949b436a70b3a3977acc351c
-
SHA512
9eb7d3c142108a6d4402214bea8afddf76f892db491e466e07f15586392f541a5d19ba10cdb3763c565f7b3755f96aaf534cb62045158599271189a121bd7605
-
SSDEEP
12288:eiqYGxn7UcnDO0ta//e4uh6wVzaNbskXhqmY9C/ff:wYGxngia/Ruh6IkbskRHA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9879420ae6a9838cfd774f7bb0a2518_JaffaCakes118
Files
-
f9879420ae6a9838cfd774f7bb0a2518_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc8b25f8585e6e6ec166b32542625b41
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
CreateCompatibleDC
SetBkColor
SetTextColor
GetDeviceCaps
CreateSolidBrush
SelectObject
DeleteObject
DeleteDC
BitBlt
oleaut32
SysStringLen
SysFreeString
SysAllocString
VariantClear
ole32
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
user32
GetDesktopWindow
SetForegroundWindow
GetWindow
GetDC
FillRect
LoadStringA
GetSysColor
ReleaseDC
SetFocus
GetSubMenu
CreateWindowExA
GetWindowRect
SetCapture
GetDlgItem
GetMessageA
PostQuitMessage
GetParent
MoveWindow
SetTimer
InvalidateRect
EndPaint
GetWindowLongA
DestroyWindow
GetClientRect
SetWindowLongA
BeginPaint
SystemParametersInfoA
TranslateMessage
DispatchMessageA
SetDlgItemTextA
SetWindowPos
LoadCursorA
SetCursor
PeekMessageA
GetCursorPos
EndDialog
IsIconic
PostMessageA
EnableWindow
LoadIconA
DestroyMenu
DefWindowProcA
IsWindowVisible
IsWindowEnabled
SendMessageA
SetWindowTextA
EnableMenuItem
IsWindow
UpdateWindow
GetFocus
RegisterClassA
LoadBitmapA
GetSystemMetrics
MessageBoxA
ShowWindow
kernel32
ExitProcess
GetSystemDirectoryA
GetCPInfo
SetConsoleCtrlHandler
GetVersionExW
GetCurrentThread
FlushFileBuffers
GetThreadLocale
LoadLibraryExW
FindResourceA
SizeofResource
GetFileSize
lstrlenW
CompareStringA
lstrcmpiA
CompareStringW
GetCurrentDirectoryA
GetStdHandle
SetEndOfFile
FormatMessageA
GetModuleFileNameW
GetLastError
GetVersion
CreateFileMappingA
CreateFileW
FindNextFileW
GetDriveTypeA
SetHandleCount
GetCurrentProcessId
lstrlenA
UnhandledExceptionFilter
GetVersionExA
GetModuleHandleA
DeleteFileW
GetTickCount
LCMapStringW
GetLocaleInfoA
lstrcmpA
MulDiv
InterlockedDecrement
WaitForSingleObject
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
MapViewOfFile
GetConsoleCP
GetACP
GetTimeZoneInformation
IsDebuggerPresent
GetCommandLineW
WaitForMultipleObjects
TlsGetValue
GetOEMCP
HeapSize
GlobalAlloc
GlobalFree
FreeEnvironmentStringsW
RaiseException
TlsSetValue
IsValidCodePage
QueryPerformanceCounter
TerminateProcess
GlobalUnlock
FileTimeToLocalFileTime
SetLastError
DuplicateHandle
Sleep
SetFileAttributesA
GetStartupInfoW
WriteConsoleA
ResetEvent
SetStdHandle
FreeLibrary
DeleteCriticalSection
HeapFree
GlobalLock
SetEnvironmentVariableA
InterlockedExchange
GetProcAddress
LoadLibraryW
GetLocalTime
WriteConsoleW
HeapReAlloc
EnterCriticalSection
GetModuleHandleW
GetEnvironmentStringsW
CreateDirectoryA
GetSystemInfo
UnmapViewOfFile
LeaveCriticalSection
ReleaseMutex
LoadLibraryExA
FileTimeToSystemTime
ReadFile
WriteFile
GetCurrentProcess
GetStringTypeA
SetUnhandledExceptionFilter
SetErrorMode
InitializeCriticalSection
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
lstrcpyA
lstrcatA
GetCommandLineA
GetConsoleMode
CreateThread
VirtualAlloc
CreateProcessA
LockResource
LoadResource
lstrcpynA
FindClose
InterlockedCompareExchange
InterlockedIncrement
LocalFree
LocalAlloc
DeleteFileA
FindNextFileA
HeapCreate
WritePrivateProfileStringA
VirtualProtect
GetFullPathNameA
GetFileAttributesW
HeapAlloc
VirtualQuery
GetFileType
FindFirstFileW
GetWindowsDirectoryA
GetConsoleOutputCP
GetSystemTimeAsFileTime
SetEvent
FindFirstFileA
CloseHandle
CreateEventW
TlsFree
VirtualFree
HeapDestroy
CreateEventA
CreateFileA
GetProcessHeap
GetPrivateProfileStringA
SetFilePointer
GetCurrentThreadId
TlsAlloc
GetModuleFileNameA
FormatMessageW
LoadLibraryA
GetStringTypeW
GetFileAttributesA
advapi32
RegSetValueExW
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExW
msvcrt
free
Sections
oqmko Size: 464KB - Virtual size: 463KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE