Static task
static1
Behavioral task
behavioral1
Sample
058162a2a7f05eccfb5fb1a2b08c6e06_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
058162a2a7f05eccfb5fb1a2b08c6e06_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
058162a2a7f05eccfb5fb1a2b08c6e06_JaffaCakes118
-
Size
116KB
-
MD5
058162a2a7f05eccfb5fb1a2b08c6e06
-
SHA1
03bd455ad7879ef50ebc48bcacbbf0651d5e85f0
-
SHA256
bdc8411f42c77a9c291afb16ebdd1bff42bcbc662d29e98912f81950dec18906
-
SHA512
c14543889ef15d253b242ef2883ff3aa372a4e570e15d691740e1238ef0f79fa32999de75217cb6aae5137d14384ad92dd7c14511d6d525812afdd679ee3e165
-
SSDEEP
1536:rDGyrWzVwoyin/E3ogHHY92UNcZhbw/j01hQvxkxPuQFCPAuz2pCvpwGwx:rELn/V2HYvKZhAcuxkFu9D2YRwb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 058162a2a7f05eccfb5fb1a2b08c6e06_JaffaCakes118
Files
-
058162a2a7f05eccfb5fb1a2b08c6e06_JaffaCakes118.exe windows:4 windows x86 arch:x86
11a81e9e1d0fc7c80d9da601174f4dc0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memmove
cos
calloc
ole32
MkParseDisplayName
CoUnmarshalInterface
GetHGlobalFromStream
CLSIDFromString
OleRun
CoDisconnectObject
kernel32
GetSystemDefaultLangID
EnterCriticalSection
ResetEvent
GetCurrentThread
lstrcatA
GetLocaleInfoA
GetUserDefaultLCID
WideCharToMultiByte
VirtualFree
SetThreadLocale
CreateFileA
SetEvent
VirtualAllocEx
FreeResource
VirtualQuery
GetTickCount
GetCurrentThreadId
SetFilePointer
CreateEventA
GetLocalTime
SetLastError
GetProcessHeap
GetModuleHandleA
GetModuleFileNameA
GetVersion
FormatMessageA
GetThreadLocale
HeapAlloc
GetDiskFreeSpaceA
WaitForSingleObject
GetFileSize
LoadResource
GetStringTypeA
DeleteCriticalSection
EnumCalendarInfoA
FindClose
FreeLibrary
HeapDestroy
ExitThread
CompareStringA
GetStringTypeW
GetStdHandle
LoadLibraryA
DeleteFileA
GetOEMCP
lstrlenA
CreateThread
ReadFile
HeapFree
FindFirstFileA
GetLastError
SetHandleCount
GlobalAlloc
GetFullPathNameA
MoveFileExA
lstrcpyA
VirtualAlloc
ExitProcess
SetErrorMode
lstrcmpiA
lstrcpynA
LocalReAlloc
CloseHandle
GlobalDeleteAtom
GetEnvironmentStrings
Sleep
SizeofResource
InitializeCriticalSection
GetACP
GetFileAttributesA
GetCommandLineA
WriteFile
LockResource
GlobalAddAtomA
LocalFree
LocalAlloc
GetFileType
LoadLibraryExA
GetStartupInfoA
RaiseException
GlobalFindAtomA
GetCurrentProcessId
GetDateFormatA
GetVersionExA
comctl32
ImageList_Add
ImageList_Remove
ImageList_Destroy
ImageList_DrawEx
user32
GetMenuItemInfoA
SetTimer
TrackPopupMenu
SetParent
EndPaint
SetWindowsHookExA
SetClipboardData
GetWindowTextA
KillTimer
LoadKeyboardLayoutA
MessageBeep
GetScrollInfo
GetActiveWindow
RegisterWindowMessageA
GetClassInfoA
CreatePopupMenu
DrawIconEx
SetWindowLongA
OpenClipboard
FindWindowA
IntersectRect
DrawEdge
GetMenu
WindowFromPoint
GetWindowDC
GetDCEx
InsertMenuItemA
GetIconInfo
DrawMenuBar
GetSystemMenu
SetWindowPlacement
RemovePropA
GetPropA
EnumChildWindows
UnregisterClassA
GetLastActivePopup
GetWindow
EnableMenuItem
CreateWindowExA
GetDesktopWindow
SetScrollPos
CallWindowProcA
DrawTextA
ReleaseDC
GetTopWindow
SetCapture
DefFrameProcA
IsWindowVisible
InsertMenuA
BeginPaint
GetMenuItemID
SetMenuItemInfoA
DrawIcon
GetWindowRect
DestroyCursor
IsWindowUnicode
SetPropA
EnumWindows
DrawAnimatedRects
RemoveMenu
GetKeyboardType
MapVirtualKeyA
GetScrollPos
GetMenuState
EnumThreadWindows
SetClassLongA
PeekMessageW
GetClipboardData
OemToCharA
GetKeyboardState
CharToOemA
EnableScrollBar
GetFocus
SystemParametersInfoA
MapWindowPoints
ShowWindow
PostMessageA
GetSysColor
LoadCursorA
MoveWindow
RegisterClassA
GetClassNameA
FrameRect
ReleaseCapture
GetCursor
RegisterClipboardFormatA
ClientToScreen
GetCapture
SetActiveWindow
MsgWaitForMultipleObjects
CharUpperBuffA
DispatchMessageA
RedrawWindow
CheckMenuItem
CharNextA
GetKeyboardLayoutNameA
SetScrollInfo
CreateIcon
UnhookWindowsHookEx
SetWindowTextA
DrawFrameControl
ShowScrollBar
InvalidateRect
IsWindow
MessageBoxA
OffsetRect
IsChild
SetMenu
SendMessageA
DispatchMessageW
EqualRect
SetWindowLongW
GetClassLongA
GetWindowThreadProcessId
GetScrollRange
GetWindowLongA
SetFocus
ChildWindowFromPoint
InflateRect
CharNextW
LoadBitmapA
GetKeyboardLayout
CloseClipboard
GetDC
LoadIconA
GetSysColorBrush
GetSystemMetrics
IsIconic
GetDlgItem
ScrollWindow
GetMenuItemCount
AdjustWindowRectEx
GetParent
GetKeyboardLayoutList
SetWindowPos
GetWindowPlacement
DefWindowProcA
DefMDIChildProcA
DestroyIcon
wsprintfA
IsZoomed
GetMessagePos
GetClientRect
PtInRect
GetForegroundWindow
LoadStringA
DestroyWindow
GetMenuStringA
CharLowerBuffA
FillRect
UpdateWindow
WaitMessage
ScreenToClient
GetWindowLongW
TranslateMessage
GetCursorPos
ShowOwnedPopups
SetRect
DestroyMenu
IsWindowEnabled
CharLowerA
TranslateMDISysAccel
GetSubMenu
SetCursor
ActivateKeyboardLayout
DeleteMenu
SetScrollRange
PostQuitMessage
EmptyClipboard
GetKeyState
IsRectEmpty
EnableWindow
CallNextHookEx
SetForegroundWindow
PeekMessageA
SendMessageW
IsDialogMessageW
GetKeyNameTextA
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE