Static task
static1
Behavioral task
behavioral1
Sample
feebb968f19e17fc8ddf00442253784d_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
feebb968f19e17fc8ddf00442253784d_JaffaCakes118
-
Size
216KB
-
MD5
feebb968f19e17fc8ddf00442253784d
-
SHA1
685f1d14ec3d922429ee9a75c5c8162eee9eeaf2
-
SHA256
934ab21fa54be64ab7e48aaade090ff20c3eb32ff45302c396dd89e47b3d2397
-
SHA512
a5b69914c1f05195a72a034ecaa3655a97edf0153df9790a33e84fd72247e95058b14e2f6c1ed76ca97dcfe64488e80b6dd9768ee97295f40d3a1d4a31fe6960
-
SSDEEP
3072:ovfXB+G1rilPYsYDOUlF2kebW181COGgxoIG/sBtM0pAPNs7r9Rko0X9zIyxQfjv:oXX0G1ulgsY3ReUcCOR3dn9Go0iKQfjv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource feebb968f19e17fc8ddf00442253784d_JaffaCakes118
Files
-
feebb968f19e17fc8ddf00442253784d_JaffaCakes118.exe windows:4 windows x86 arch:x86
944aff61c7bc6d7dd064614a60a8b664
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
GetDriveTypeA
GetLogicalDrives
GetModuleFileNameA
MulDiv
GlobalFree
GlobalAlloc
OpenProcess
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
TerminateProcess
CompareStringW
CompareStringA
SetEndOfFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
DeleteFileA
SetFilePointer
LCMapStringW
DeviceIoControl
MultiByteToWideChar
WideCharToMultiByte
ReadFile
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
GetOEMCP
GetACP
GetCPInfo
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindNextFileA
FindFirstFileA
GetLastError
HeapReAlloc
GetCurrentProcess
ExitProcess
HeapAlloc
HeapFree
GetLocalTime
GetSystemTime
GetTimeZoneInformation
SetEnvironmentVariableA
RtlUnwind
GetSystemDirectoryA
WinExec
Sleep
GetLogicalDriveStringsA
GetVolumeInformationA
SetErrorMode
CreateDirectoryA
GetFileAttributesA
Beep
CopyFileA
GetWindowsDirectoryA
LCMapStringA
SetFileAttributesA
SetHandleCount
GetVersion
user32
SendDlgItemMessageA
GetWindowTextLengthA
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
RegisterWindowMessageA
RegisterClassExA
EndDialog
BeginPaint
GetClientRect
FillRect
MoveWindow
DrawTextA
EndPaint
PostQuitMessage
GetSystemMetrics
LoadCursorA
UpdateWindow
SendMessageA
MessageBoxA
SetWindowPos
ShowWindow
wsprintfA
SetDlgItemTextA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
SetActiveWindow
FindWindowA
DefWindowProcA
GetCursorPos
SetForegroundWindow
TrackPopupMenu
PostMessageA
GetMenuItemID
LoadMenuA
GetSubMenu
DestroyMenu
SetMenuDefaultItem
LoadStringA
KillTimer
SetTimer
LoadIconA
DestroyWindow
CreateWindowExA
DialogBoxParamA
gdi32
CreateFontA
CreateSolidBrush
SetBkMode
SelectObject
SetTextColor
GetDeviceCaps
advapi32
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
shell32
Shell_NotifyIconA
ShellExecuteA
winmm
mciSendCommandA
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE