Static task
static1
Behavioral task
behavioral1
Sample
06e80f940c06ba15523d14da881362bd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06e80f940c06ba15523d14da881362bd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06e80f940c06ba15523d14da881362bd_JaffaCakes118
-
Size
148KB
-
MD5
06e80f940c06ba15523d14da881362bd
-
SHA1
bc441ed681bb848da7194db7d628f87843af9f72
-
SHA256
5bc5aac212a113767e7c2bac4a3d6ad8b2d749a7487f8adda4634e814acb5cab
-
SHA512
b087d14591d2e8ced2a9d669091b3c1a8097cb077b17c574fbb292818fbce1fc105c3a9a6cc3b151b354f2ea2c3b77ec21c9fdb4cfbbe6574011a73313395f6d
-
SSDEEP
3072:wPGC2URsmdPO13LMGYHODt6ZCtPjqjVIIxCfzx1:wPTomAwduICtrqjVZCfz7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06e80f940c06ba15523d14da881362bd_JaffaCakes118
Files
-
06e80f940c06ba15523d14da881362bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
f29d8f719483263934f8fd8a19fcdaa2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeCreateStringHandleA
SetDlgItemInt
ShowWindowAsync
SetScrollPos
EnumDisplaySettingsW
DrawFrameControl
CreatePopupMenu
GetWindow
WindowFromPoint
CharNextExA
SetWindowContextHelpId
DrawTextA
EnableWindow
ScrollWindowEx
keybd_event
EnableMenuItem
CharLowerA
DdeUninitialize
WindowFromDC
MessageBoxA
SetClipboardData
LoadCursorA
CloseWindow
GetUserObjectInformationA
BeginPaint
PeekMessageA
GetWindowTextA
SendDlgItemMessageA
ChangeDisplaySettingsA
IsWindowVisible
DrawIcon
SetCursor
GetDlgItemTextA
ShowCursor
GetMenu
IsCharAlphaA
DeferWindowPos
GetWindowTextW
DefFrameProcA
IsWindowUnicode
DdeQueryConvInfo
LoadIconA
FindWindowExW
ShowScrollBar
CharToOemA
GetMessagePos
CreateIcon
IsCharAlphaW
DdeConnect
GetMenuItemCount
SubtractRect
MessageBeep
SetCursorPos
GetWindowPlacement
DdeInitializeA
OffsetRect
CheckMenuRadioItem
InflateRect
UnionRect
SetWindowTextW
DefWindowProcW
GetProcessWindowStation
InSendMessage
ClipCursor
SetMenuDefaultItem
CopyAcceleratorTableA
SetRectEmpty
DestroyCursor
EndDeferWindowPos
SendMessageTimeoutW
GetDlgItemInt
GetScrollInfo
GetDlgItem
ToAsciiEx
CharNextW
GetMenuState
TrackPopupMenuEx
CreateWindowExW
AppendMenuW
IsMenu
CreateIconIndirect
GetKeyState
EqualRect
ScrollWindow
SendMessageA
UpdateWindow
SetDlgItemTextA
IsDlgButtonChecked
SetPropA
ModifyMenuA
LoadMenuA
SendDlgItemMessageW
EnableScrollBar
IsWindow
FindWindowW
GetKeyNameTextA
GetClipboardData
OemToCharBuffA
GetCursorPos
MapDialogRect
InvalidateRgn
GetKeyboardState
GetDC
GetDesktopWindow
UnregisterClassA
LoadMenuW
BeginDeferWindowPos
LockWindowUpdate
EmptyClipboard
PostThreadMessageA
GetSubMenu
SetActiveWindow
GetWindowRect
LoadCursorW
EnumClipboardFormats
DdeCreateDataHandle
MessageBoxW
ShowOwnedPopups
DestroyMenu
SetRect
GetClassInfoA
GetClassNameA
DdeCreateStringHandleW
CheckDlgButton
UnhookWindowsHookEx
CreateIconFromResourceEx
CreateCaret
TranslateMessage
PostMessageA
advapi32
EqualSid
ReportEventA
RegSetValueExA
RegRestoreKeyA
OpenSCManagerW
OpenServiceW
RegSetValueW
RegisterEventSourceW
CloseEventLog
RegisterServiceCtrlHandlerW
OpenSCManagerA
DeregisterEventSource
RegisterServiceCtrlHandlerA
RegisterEventSourceA
QueryServiceStatus
QueryServiceConfigW
InitiateSystemShutdownA
CloseServiceHandle
ChangeServiceConfigW
StartServiceW
LsaAddAccountRights
SetServiceStatus
OpenServiceA
IsTextUnicode
RegDeleteKeyA
LsaRetrievePrivateData
DeleteService
PrivilegeCheck
OpenEventLogW
RegSetValueA
EnumServicesStatusW
LsaNtStatusToWinError
LsaOpenPolicy
LsaQueryInformationPolicy
RegNotifyChangeKeyValue
msvcrt
_controlfp
_assert
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
clock
kernel32
GetModuleHandleA
GetStartupInfoA
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ