Static task
static1
Behavioral task
behavioral1
Sample
f9c30dafad83db84414bff2f62d110af_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9c30dafad83db84414bff2f62d110af_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f9c30dafad83db84414bff2f62d110af_JaffaCakes118
-
Size
160KB
-
MD5
f9c30dafad83db84414bff2f62d110af
-
SHA1
1de6baf8aab7e4219dd93354fcef2ec3fbae0c6a
-
SHA256
bb9b200c23a1322abb048b10f4841e646fc959816e4fff50d4a85f67ef735130
-
SHA512
cf20ee29feec3b8e10139e0d4690ba8f24654f92cc5fa3bf10146bab1a11a384079a4fa7e9f881d176e95db02741695dbb8554d35cfff519b7ac24e9fd23ba14
-
SSDEEP
3072:lud0q2IOzLKOeujW0BosbiexLUbVmRvKAga/BJ:oqnbegZouPWbVmxK+/BJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9c30dafad83db84414bff2f62d110af_JaffaCakes118
Files
-
f9c30dafad83db84414bff2f62d110af_JaffaCakes118.exe windows:4 windows x86 arch:x86
94ca1290b69bc7117844110f40da5d62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
UnmapViewOfFile
_lopen
DeleteFileA
lstrcpynA
_lwrite
GetWindowsDirectoryA
_lread
LockResource
SystemTimeToFileTime
SetFileTime
CreateFileA
WriteFile
CloseHandle
ReadFile
GetSystemTime
_lclose
MapViewOfFile
GetCommandLineA
CreateFileMappingA
GetSystemDirectoryA
GetModuleFileNameA
LoadLibraryA
GetVersionExA
GetProcAddress
FreeLibrary
GetTempPathA
lstrcmpA
lstrcpyA
SizeofResource
lstrcatA
FindResourceA
_lcreat
LoadResource
LocalAlloc
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetCurrentProcess
TerminateProcess
ExitProcess
HeapCreate
GetVersion
GetStartupInfoA
GetModuleHandleA
HeapFree
GetACP
GetOEMCP
GetCPInfo
SetHandleCount
GetEnvironmentStringsW
GetFileType
GetStdHandle
HeapAlloc
lstrlenA
user32
DrawTextExA
GetWindowTextA
InflateRect
SetWindowTextA
SetWindowLongA
LoadIconA
SetRect
GetClientRect
GetMessageTime
SetWindowRgn
GetDlgItemTextA
MoveWindow
MessageBeep
SetActiveWindow
GetWindow
GetDesktopWindow
RegisterClassA
UnregisterClassA
ModifyMenuA
DestroyMenu
TrackPopupMenu
AppendMenuA
GetSubMenu
InvertRect
EndPaint
GetWindowRect
GetWindowLongA
FillRect
CopyRect
OffsetRect
DrawTextA
SetFocus
EndDialog
GetCursorPos
LoadCursorA
CharUpperA
FindWindowA
SetForegroundWindow
PostMessageA
GetForegroundWindow
CreateWindowExA
LoadImageA
DialogBoxParamA
TranslateMessage
DispatchMessageA
GetMessageA
ReleaseCapture
SetCapture
ClientToScreen
wsprintfA
CreateDialogParamA
ShowWindow
MessageBoxA
ExitWindowsEx
GetDC
SetDlgItemTextA
PtInRect
BeginPaint
LoadMenuA
CheckDlgButton
ReleaseDC
SendMessageA
EnableWindow
CheckRadioButton
GetDialogBaseUnits
SetWindowPos
WinHelpA
GetDlgItem
GetSystemMetrics
DefWindowProcA
GetSysColor
DestroyWindow
PostQuitMessage
LoadBitmapA
DrawEdge
GetSysColorBrush
DrawStateA
SetCursor
CreateDialogIndirectParamA
gdi32
AddFontResourceA
SelectObject
GetTextExtentPoint32A
CreateFontIndirectA
DeleteObject
CreateSolidBrush
SetTextColor
GetBkColor
SetBkMode
SetBkColor
BitBlt
CreateCompatibleDC
DeleteDC
LineTo
MoveToEx
GetObjectA
TextOutA
CreatePolygonRgn
CreatePen
EnumFontFamiliesA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CoCreateInstance
CoInitialize
comctl32
ord17
Sections
pec1 Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pec Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 876B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ