Static task
static1
Behavioral task
behavioral1
Sample
0350ee3b3b6f8a5a41dd6b510b3efc87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0350ee3b3b6f8a5a41dd6b510b3efc87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0350ee3b3b6f8a5a41dd6b510b3efc87_JaffaCakes118
-
Size
140KB
-
MD5
0350ee3b3b6f8a5a41dd6b510b3efc87
-
SHA1
f81372c444e1977cd274906f479ca1ed62e4acd9
-
SHA256
19a4f6afde4880250a25661d6df40d50a7d674620b90de3ce22b8beb9982cdad
-
SHA512
3eb48a282b29b50d6271a047c99353cb07620236c0c2541c87efec0b2c107ce9322167fe440357c1fddf0f7b8f72689d94aaacb316f1bd2e11b5a0d92cfafd33
-
SSDEEP
1536:60FuPTIR9xsxqKMYDiCH8FxCbn9szQJ01zI7NgsoQzJkL:60Fuk9xC7MYDixAbn9sMGKmQzC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0350ee3b3b6f8a5a41dd6b510b3efc87_JaffaCakes118
Files
-
0350ee3b3b6f8a5a41dd6b510b3efc87_JaffaCakes118.exe windows:1 windows x86 arch:x86
25c94c4eb4f43c2f5d21c9e24a39b57b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
user32
SetForegroundWindow
wsprintfA
FindWindowA
WaitForInputIdle
CharPrevA
MessageBoxA
CharToOemA
EndDialog
SendDlgItemMessageA
CharNextA
UpdateWindow
ReleaseDC
GetDC
CreateWindowExA
RegisterClassA
LoadCursorA
LoadBitmapA
LoadIconA
SetCursor
CharUpperA
IsWindow
SetTimer
GetClassInfoA
KillTimer
PostMessageA
ScreenToClient
IsIconic
GetSystemMetrics
GetWindowRect
MoveWindow
wvsprintfA
MessageBeep
SetDlgItemTextA
GetDlgItem
SendMessageA
FillRect
PeekMessageA
TranslateMessage
DispatchMessageA
IsDialogMessageA
BeginPaint
GetClientRect
EndPaint
InvalidateRect
DefWindowProcA
DestroyWindow
UnregisterClassA
DialogBoxParamA
LoadStringA
ShowWindow
gdi32
SetTextColor
CreateFontIndirectA
BitBlt
CreateCompatibleDC
LineTo
GetDeviceCaps
GetClipBox
DeleteDC
SetBkColor
MoveToEx
CreatePen
SelectPalette
SelectObject
StretchDIBits
DeleteObject
CreatePalette
GetNearestPaletteIndex
CreateSolidBrush
RealizePalette
kernel32
GetShortPathNameA
GetProfileStringA
VirtualFree
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
UnhandledExceptionFilter
RtlUnwind
GetProcAddress
WideCharToMultiByte
ExitProcess
GetCommandLineA
GetEnvironmentStrings
GetStartupInfoA
GetLogicalDrives
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
GetLastError
lstrcmpiA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
MultiByteToWideChar
GlobalUnlock
GlobalHandle
GlobalFree
GlobalAlloc
GlobalLock
FatalAppExitA
MulDiv
FindResourceA
LoadResource
LockResource
_lopen
_lclose
GetDriveTypeA
CreateProcessA
WinExec
GetVersion
VirtualAlloc
WaitForSingleObject
GetModuleHandleA
lstrcatA
GetVersionExA
lstrcpyA
GetModuleFileNameA
lstrcpynA
GetSystemInfo
GetWindowsDirectoryA
Sleep
lstrlenA
GlobalMemoryStatus
ole32
OleBuildVersion
OleUninitialize
CoGetClassObject
CoInitialize
CoUninitialize
OleInitialize
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE