Static task
static1
Behavioral task
behavioral1
Sample
01dbb5d3610bfa4f8717f2a8e5dd6f01_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
01dbb5d3610bfa4f8717f2a8e5dd6f01_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
01dbb5d3610bfa4f8717f2a8e5dd6f01_JaffaCakes118
-
Size
160KB
-
MD5
01dbb5d3610bfa4f8717f2a8e5dd6f01
-
SHA1
b9428ccc93061d8e421a9d863bbbf562e10a28a5
-
SHA256
d022ee0756d53f22a3128bfd267aaf3110bff406ca51aa67e287c420f5696402
-
SHA512
2e8d1feb4afde4f479f0324126391930cf150a95b20b299d512c04ef7435d169e5a4b5f6034f93158a3c650f90dfb630764b496e7cf815b59168c619a86be409
-
SSDEEP
3072:2k21qY7ANcYeZB3EvV4qn9RC/TAdfBLepJhYFINoXXotkEUzaraWt81NiPJJJE7M:h217UNcYRvKgE/TUwJhyIIXoqNmrabix
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01dbb5d3610bfa4f8717f2a8e5dd6f01_JaffaCakes118
Files
-
01dbb5d3610bfa4f8717f2a8e5dd6f01_JaffaCakes118.exe windows:4 windows x86 arch:x86
04f7c06738c5102e5cee3c2542ca3349
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerInstallFileA
GetFileVersionInfoA
kernel32
GetStringTypeA
GetLastError
GetCurrentThreadId
ExitProcess
lstrcatA
LoadLibraryA
lstrcmpiA
HeapDestroy
SetThreadLocale
VirtualAlloc
SetLastError
GetVersionExA
GetCurrentProcessId
GetLocalTime
SizeofResource
GetOEMCP
CloseHandle
ExitThread
LoadLibraryExA
lstrcpynA
GetModuleHandleA
RaiseException
advapi32
RegQueryInfoKeyA
RegDeleteValueA
comdlg32
GetOpenFileNameA
ChooseColorA
FindTextA
GetSaveFileNameA
GetFileTitleA
GetFileTitleA
ChooseColorA
ChooseColorA
GetOpenFileNameA
FindTextA
shell32
SHGetDiskFreeSpaceA
SHGetSpecialFolderLocation
SHGetFileInfoA
Shell_NotifyIconA
SHGetFolderPathA
shlwapi
SHQueryInfoKeyA
SHQueryInfoKeyA
SHQueryValueExA
PathGetCharTypeA
PathFileExistsA
oleaut32
RegisterTypeLib
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayCreate
GetErrorInfo
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetElement
SysStringLen
RegisterTypeLib
SysReAllocStringLen
SysFreeString
msvcrt
ceil
sqrt
log
fabs
wcsncmp
abs
swprintf
mbstowcs
_acmdln
strcmp
memmove
rand
tolower
pow
calloc
memcpy
clock
exit
exp
time
strlen
atol
log10
sin
memset
strncmp
malloc
srand
memcmp
sprintf
wcschr
wcstol
wcscspn
pow
clock
time
exp
strncmp
tolower
log10
log
srand
wcstol
ceil
fabs
wcscspn
rand
strcmp
exit
comctl32
ImageList_Read
ImageList_Draw
ImageList_Add
ImageList_GetBkColor
ImageList_Write
ImageList_Create
ImageList_Add
ImageList_Draw
ImageList_GetBkColor
gdi32
SetBkMode
GetCurrentPositionEx
RestoreDC
GetPaletteEntries
SetPixel
CreateBitmap
CreateDIBSection
user32
SetWindowTextA
SetTimer
GetActiveWindow
GetMenuItemID
FrameRect
GetIconInfo
DrawIcon
DefMDIChildProcA
CharNextA
GetForegroundWindow
GetScrollRange
EnableScrollBar
CallNextHookEx
GetClipboardData
GetClassLongA
GetFocus
GetMenuItemCount
GetPropA
DeferWindowPos
CharLowerA
ShowWindow
IsWindowEnabled
CharLowerBuffA
FillRect
IsChild
GetMessagePos
CreatePopupMenu
GetMenuItemInfoA
RegisterClassA
DrawEdge
DrawFrameControl
GetCursorPos
SetWindowPos
GetKeyState
GetSubMenu
FindWindowA
DrawTextA
EnumChildWindows
SetCursor
EqualRect
GetLastActivePopup
BeginPaint
GetCursor
ClientToScreen
DefFrameProcA
DispatchMessageA
GetWindow
EnumWindows
GetKeyNameTextA
GetSysColorBrush
GetMenu
SetWindowLongA
EndDeferWindowPos
CreateMenu
CharToOemA
GetMenuState
GetCapture
EnumThreadWindows
GetClassInfoA
GetScrollPos
IsWindowVisible
EnableWindow
EndPaint
GetDesktopWindow
GetSysColor
MessageBoxA
GetClientRect
CreateWindowExA
GetScrollInfo
TrackPopupMenu
DispatchMessageW
IsMenu
DefWindowProcA
GetDCEx
DrawMenuBar
GetDC
IsDialogMessageA
CallWindowProcA
GetDlgItem
ShowScrollBar
CreateIcon
CheckMenuItem
GetWindowTextA
HideCaret
GetParent
EnableMenuItem
BeginDeferWindowPos
DrawIconEx
GetMenuStringA
SystemParametersInfoA
ole32
CreateOleAdviseHolder
CreateStreamOnHGlobal
WriteClassStm
CoGetContextToken
CreateBindCtx
MkParseDisplayName
CoCreateFreeThreadedMarshaler
CoRevokeClassObject
CoUninitialize
CLSIDFromProgID
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 1KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE