Static task
static1
Behavioral task
behavioral1
Sample
02cf6a8cec4553bad94955c12d8e9e7c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
02cf6a8cec4553bad94955c12d8e9e7c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
02cf6a8cec4553bad94955c12d8e9e7c_JaffaCakes118
-
Size
291KB
-
MD5
02cf6a8cec4553bad94955c12d8e9e7c
-
SHA1
7851ab98ca40524b71e80d3ee49610d283a6a0fa
-
SHA256
b5edc39997d1079222ea32915faedd4d4ae1fc55a26df1c46ce13d43932056e5
-
SHA512
958041eb717bc1286330a018ac8689e73c19092a87af62738598774f97c8a119b94eddfa9d65d9625de3b68107e07ebfbc5fbf0de67e2c77e3c84dea42669414
-
SSDEEP
6144:QYcxPOjA7bRqq1DeP1ToL3ZOhs82rVEiwtRGF8+nlnM:rwOs7cVP1XsHrVdwtRGFvM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02cf6a8cec4553bad94955c12d8e9e7c_JaffaCakes118
Files
-
02cf6a8cec4553bad94955c12d8e9e7c_JaffaCakes118.exe windows:6 windows x86 arch:x86
ff4d5a5a264cb3e5696819efe16fb019
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
ClientToScreen
DrawTextW
InvalidateRect
HideCaret
wvsprintfW
GetWindow
MsgWaitForMultipleObjects
LoadIconW
GetClassInfoW
EnableScrollBar
SystemParametersInfoW
IsMenu
GetCapture
IsRectEmpty
CharNextW
GetWindowRect
ReleaseDC
BringWindowToTop
CheckMenuItem
EndPaint
RemoveMenu
LoadMenuW
RedrawWindow
DestroyIcon
CreateCaret
GetCaretPos
GetSysColor
TranslateMessage
GetWindowDC
TabbedTextOutW
SetWindowLongW
SetActiveWindow
FrameRect
IsWindow
GetDC
RegisterClipboardFormatW
FillRect
PtInRect
CopyRect
SetCursor
DestroyWindow
SendMessageW
ShowCursor
MessageBeep
SetWindowTextW
SetCaretPos
UnionRect
GetMenu
GetDlgItemInt
MessageBoxW
WindowFromPoint
UpdateWindow
SendDlgItemMessageW
DrawFocusRect
kernel32
CreateDirectoryW
CreateFileW
MulDiv
InterlockedExchange
HeapSetInformation
FindFirstFileW
LoadLibraryW
GetTempFileNameW
TerminateProcess
VirtualAlloc
lstrcpyW
CloseHandle
SetUnhandledExceptionFilter
GetCurrentProcess
lstrcatW
GlobalLock
lstrcpynW
GetLastError
SetErrorMode
GetExitCodeThread
QueryPerformanceCounter
GetFileAttributesW
GetNumberFormatW
GetProcessHeap
GetTickCount
GlobalAlloc
GetStartupInfoW
GetCurrentProcessId
FindClose
LocalFree
GetCurrentThreadId
FileTimeToLocalFileTime
VirtualFree
GetProcessHeaps
LocalAlloc
MultiByteToWideChar
HeapQueryInformation
GetProcAddress
GetFileTime
GlobalFree
FileTimeToSystemTime
gdiplus
GdipCloneImage
GdiplusShutdown
GdipDisposeImage
GdiplusStartup
GdipCreateBitmapFromFile
GdipAlloc
GdipSaveImageToFile
GdipGetImageRawFormat
GdipSaveImageToStream
GdipCreateBitmapFromHBITMAP
GdipGetPropertySize
GdipFree
GdipSetPropertyItem
gdi32
SetViewportExtEx
StretchBlt
ExtTextOutW
CreatePalette
SelectObject
GetCurrentObject
SetDIBColorTable
CreateFontIndirectW
GetDIBits
SetTextColor
SetMapMode
GetDIBColorTable
PatBlt
GetBkMode
CreateCompatibleBitmap
MoveToEx
CreateICW
GetNearestPaletteIndex
GetObjectW
UnrealizeObject
PolyBezier
GetPixel
Polygon
SetPixel
SelectPalette
PlayMetaFile
SetROP2
DeleteObject
TextOutW
CreatePolygonRgn
DeleteDC
BitBlt
GetDeviceCaps
SetStretchBltMode
SetPaletteEntries
LineTo
RestoreDC
CreatePen
EnumFontFamiliesW
CreateCompatibleDC
SetBkMode
Polyline
CreateHalftonePalette
CreateDIBSection
SetDIBits
CreateDIBitmap
PtVisible
Escape
SetBrushOrgEx
GetTextMetricsW
GetPaletteEntries
ole32
CoCreateInstance
WriteFmtUserTypeStg
WriteClassStg
CoTaskMemFree
CLSIDFromString
CoInitialize
PropVariantClear
CoUninitialize
Sections
.text Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ