Static task
static1
Behavioral task
behavioral1
Sample
fab3c7f1db09d519d2269d76af96e93c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fab3c7f1db09d519d2269d76af96e93c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fab3c7f1db09d519d2269d76af96e93c_JaffaCakes118
-
Size
142KB
-
MD5
fab3c7f1db09d519d2269d76af96e93c
-
SHA1
8c6dbb2afb6805a93104b7af18cbb4cef1c514af
-
SHA256
4109a70e6dc44ddd67472d85e3ff0e8067305612e9c1621172e1b1b27add5583
-
SHA512
914803ddb4ff2782c177fb3afb50c8b7303093c36ffb45d9da6c1c5265b39a8d0060736bb441dc369c0fa540e2b4bbe514d10dc9ca8d913ea0bda301270a301a
-
SSDEEP
3072:dQ/I6pZIQL5lamEGjjfUuwhJXP939u/q/i:dQQ6pGDp0jsLhJf9tu/q/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fab3c7f1db09d519d2269d76af96e93c_JaffaCakes118
Files
-
fab3c7f1db09d519d2269d76af96e93c_JaffaCakes118.exe windows:4 windows x86 arch:x86
953973cdd0e841a8fc2ebab23b466881
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
GetSystemInfo
lstrcpyW
LocalFree
DeleteFileW
GetLocalTime
GetTempPathW
Sleep
LocalAlloc
InterlockedIncrement
GetFileType
WaitForSingleObject
GetStartupInfoA
InterlockedExchange
GetConsoleOutputCP
EnterCriticalSection
LoadLibraryW
GetTimeFormatW
GetLocaleInfoA
GetCommandLineA
FreeEnvironmentStringsA
HeapFree
GetFileAttributesW
GlobalAlloc
OpenEventW
SizeofResource
GetTimeZoneInformation
GetModuleHandleA
GlobalLock
lstrcpynW
FindFirstFileW
SetStdHandle
GetEnvironmentStrings
GetDriveTypeW
SetFilePointer
VirtualAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
ReadFile
SetEndOfFile
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualQuery
RtlUnwind
IsBadWritePtr
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
CreateFileA
CloseHandle
VirtualFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetVersionExA
VirtualProtect
user32
OpenClipboard
DialogBoxIndirectParamW
IsChild
MapWindowPoints
TranslateMessage
IsWindowUnicode
SetWindowPlacement
IsWindowVisible
WindowFromPoint
EnableMenuItem
CallWindowProcW
LoadStringW
GetSysColor
GetWindowTextW
SetMenuItemInfoW
CallWindowProcA
CreateAcceleratorTableW
MessageBoxW
TrackPopupMenu
IsZoomed
DestroyCaret
GetSubMenu
IsWindow
ScreenToClient
GetFocus
ToAscii
DrawTextExW
CreateCaret
LoadMenuW
ScrollWindow
SetDlgItemTextW
GetWindowRect
SetWindowLongA
GetDlgCtrlID
SetScrollRange
GetWindowLongW
IsIconic
CharLowerW
FindWindowW
EnableWindow
EndPaint
GetClassNameW
ShowWindow
PeekMessageW
DrawEdge
GetScrollRange
UpdateWindow
SendMessageW
DefWindowProcW
EndDialog
GetDC
IsDialogMessageA
IsClipboardFormatAvailable
TranslateAcceleratorW
SetForegroundWindow
SystemParametersInfoW
GetDlgItemInt
SetScrollInfo
GetMenu
GetScrollPos
ShowCaret
GetClientRect
DrawIcon
PtInRect
CreateWindowExW
DrawTextW
InsertMenuW
RegisterWindowMessageW
GetClipboardData
SetCaretPos
PostMessageW
SetWindowsHookExW
FrameRect
SendDlgItemMessageW
GetDlgItem
comdlg32
FindTextW
GetOpenFileNameA
PrintDlgA
PageSetupDlgW
ReplaceTextA
GetSaveFileNameA
GetOpenFileNameW
ChooseColorA
PrintDlgW
GetFileTitleW
ChooseFontW
GetFileTitleA
ReplaceTextW
GetSaveFileNameW
ChooseColorW
ChooseFontA
FindTextA
PageSetupDlgA
oleaut32
VariantCopy
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ