Static task
static1
Behavioral task
behavioral1
Sample
034c2abe29e712bb17e0acf17d842c83_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
034c2abe29e712bb17e0acf17d842c83_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
034c2abe29e712bb17e0acf17d842c83_JaffaCakes118
-
Size
101KB
-
MD5
034c2abe29e712bb17e0acf17d842c83
-
SHA1
2e98055b85d41e48d30333fae4242fa8d2ec1d4d
-
SHA256
0aa05d48f4ac2e5b358232392f408536cef059813b311737c99cfe5bcac7f420
-
SHA512
9443f55def624b835bff4987692ec6a3180d5d35c15c717799d7185877f4981a0eb3920a9f7a3744ccb51af8ff2a7e242e9dbce477b8b8a750a73d5fea92e2b5
-
SSDEEP
1536:X4KprwD3QiDB+9Fds0ZPgl5CjshJL3DfwYQFlg3GNpVQgDJ:X4yrwbQQB+9FK9l0s7zYYQFldpVDJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 034c2abe29e712bb17e0acf17d842c83_JaffaCakes118
Files
-
034c2abe29e712bb17e0acf17d842c83_JaffaCakes118.exe windows:4 windows x86 arch:x86
27b68d3d470bb6ea54e17dfdb6fe5392
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCapture
GetKeyboardState
GetKeyNameTextA
RegisterClipboardFormatA
GetWindowDC
PostMessageA
ActivateKeyboardLayout
MessageBoxA
LoadStringA
SetRect
PostQuitMessage
CheckMenuItem
CreatePopupMenu
IsChild
EnableWindow
DeleteMenu
IsDialogMessageW
LoadCursorA
OpenClipboard
EnumThreadWindows
InsertMenuItemA
DefFrameProcA
GetScrollPos
GetKeyboardLayout
IsWindowEnabled
ScreenToClient
LoadIconA
EnumWindows
SetWindowLongA
GetMenu
GetKeyboardLayoutList
GetCapture
SendMessageW
GetKeyboardLayoutNameA
FindWindowA
CharToOemA
CallWindowProcA
GetCursor
ShowWindow
DrawAnimatedRects
OffsetRect
DrawTextA
GetClassInfoA
GetClientRect
WindowFromPoint
GetClassLongA
BeginPaint
ScrollWindow
IsDialogMessageA
DrawFrameControl
GetWindowLongW
MapVirtualKeyA
SetWindowTextA
GetScrollRange
ReleaseCapture
ReleaseDC
SendMessageA
FrameRect
wsprintfA
GetIconInfo
EnableMenuItem
SetParent
GetMenuStringA
OemToCharA
IsWindowVisible
GetSubMenu
GetMessagePos
GetWindowTextA
EnumChildWindows
PeekMessageW
LoadKeyboardLayoutA
GetKeyState
GetWindowRect
IsZoomed
GetWindow
KillTimer
SystemParametersInfoA
DefMDIChildProcA
SetMenuItemInfoA
CreateWindowExA
SetScrollRange
ClientToScreen
CharNextA
DrawMenuBar
GetScrollInfo
GetClassNameA
RegisterClassA
EnableScrollBar
SetScrollPos
EqualRect
IntersectRect
FillRect
RedrawWindow
GetSystemMenu
CharUpperBuffA
DrawIconEx
GetSystemMetrics
GetMenuItemCount
DispatchMessageA
DrawEdge
DestroyIcon
GetWindowLongA
ChildWindowFromPoint
DispatchMessageW
MoveWindow
GetDlgItem
DefWindowProcA
SetTimer
MsgWaitForMultipleObjects
SetWindowLongW
GetForegroundWindow
LoadBitmapA
ShowScrollBar
SetActiveWindow
RemoveMenu
InsertMenuA
GetClipboardData
ShowOwnedPopups
GetWindowThreadProcessId
oleaut32
SafeArrayGetElement
RegisterTypeLib
advapi32
RegDeleteKeyA
GetLengthSid
shlwapi
SHDeleteValueA
SHQueryValueExA
SHStrDupA
SHGetValueA
comdlg32
FindTextA
ole32
CoFreeUnusedLibraries
CreateBindCtx
StgOpenStorage
CoDisconnectObject
CoGetObjectContext
ReleaseStgMedium
CoUninitialize
CoGetContextToken
WriteClassStm
OleRun
kernel32
Sleep
MoveFileA
HeapAlloc
GetProcAddress
GlobalFindAtomA
GetModuleHandleA
VirtualAllocEx
GetCPInfo
ExitProcess
LoadLibraryA
GetStringTypeW
GetDateFormatA
lstrlenA
shell32
SHGetFolderPathA
SHGetDesktopFolder
msvcrt
clock
memcmp
log
memcpy
strncmp
sin
srand
tan
memmove
version
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
ImageList_Remove
gdi32
GetCurrentPositionEx
SetTextColor
CreateDIBitmap
CopyEnhMetaFileA
Sections
CODE Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 549B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ