Static task
static1
Behavioral task
behavioral1
Sample
0cece358f6438afbf75b74818a55793e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0cece358f6438afbf75b74818a55793e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0cece358f6438afbf75b74818a55793e_JaffaCakes118
-
Size
112KB
-
MD5
0cece358f6438afbf75b74818a55793e
-
SHA1
59d376122d6ee3f1d702fe8e227ef35fd345c050
-
SHA256
799c875863f96323be84a0f514698464be9b25748089e67198157c4a3f9e3b00
-
SHA512
ef075784a861021d9be40aa051b13d3c02ce45027b6f4b7e90c575e2303a7eaad826cfbbad291fd568b1be1262556f8eafdf134218b9e8a82a84e302c98c7c95
-
SSDEEP
3072:NQmdFes6tyXvEw/lnpBDN0K4ZJltZrpRF:Nz6I8slnpzethpj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cece358f6438afbf75b74818a55793e_JaffaCakes118
Files
-
0cece358f6438afbf75b74818a55793e_JaffaCakes118.exe windows:4 windows x86 arch:x86
50c740888591144deb3f500f5556ab49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
_TrackMouseEvent
fauxshell
?GetOpenFileNamePE@@YAHPAUtagOFNW@@_N@Z
?GetSaveFileNamePE@@YAHPAUtagOFNW@@_N@Z
mfc42u
ord3871
ord640
ord2406
ord3658
ord3621
ord5706
ord535
ord3478
ord858
ord800
ord538
ord1165
ord1143
ord1634
ord823
ord3479
ord825
ord3289
ord5785
ord2855
ord5871
ord5781
ord1633
ord5869
ord537
ord2810
ord6168
ord3614
ord2858
ord4294
ord3701
ord2372
ord4292
ord4128
ord3688
ord4118
ord6871
ord3792
ord3133
ord2859
ord2854
ord540
ord323
ord3566
msvcrt
_acmdln
swprintf
wcscat
wcschr
wcsrchr
wcscpy
__CxxFrameHandler
_wtoi
_purecall
_exit
_XcptFilter
exit
_controlfp
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
kernel32
GetModuleHandleA
lstrcmpiA
GetCurrentProcess
WriteProcessMemory
GetProcAddress
MulDiv
HeapFree
GetProcessHeap
HeapAlloc
GetVersion
lstrlenW
lstrcmpW
lstrcmpiW
EnumResourceNamesW
GetModuleHandleW
GetCurrentThreadId
FreeLibrary
GetCommandLineW
LoadLibraryW
SetFilePointer
ReadFile
CreateFileW
CloseHandle
WriteFile
GetLastError
FormatMessageW
LocalFree
GetStartupInfoA
user32
RegisterClassExW
LoadCursorW
LoadIconW
UnhookWindowsHookEx
SetWindowsHookExW
LoadBitmapW
GetDC
DestroyIcon
CopyImage
LoadImageW
GetSystemMetrics
CallNextHookEx
GetClassNameW
SetWindowLongW
GetWindowTextW
EndPaint
BeginPaint
CallWindowProcW
ReleaseDC
IsZoomed
DrawTextW
GetWindowDC
GetWindowRect
IsWindowEnabled
PtInRect
GetCapture
GetPropW
SetPropW
GetWindowLongW
GetScrollInfo
EnableScrollBar
SetWindowPos
GetScrollPos
GetScrollRange
SetScrollInfo
SetScrollPos
MoveWindow
ShowScrollBar
RemovePropW
SetTimer
KillTimer
IsWindow
ReleaseCapture
SetCapture
GetFocus
OffsetRect
InvalidateRect
CopyRect
DrawFocusRect
GetSysColor
ClientToScreen
GetMenu
SetForegroundWindow
SetCursor
SetWindowRgn
TrackPopupMenu
IsIconic
GetMenuItemCount
GetSystemMenu
GetActiveWindow
SetRect
SystemParametersInfoW
DrawIconEx
FillRect
GetSysColorBrush
DrawEdge
DrawFrameControl
MapWindowPoints
GetMessagePos
ScreenToClient
GetCursorPos
SendMessageW
MessageBoxW
ShowWindow
UpdateWindow
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
CreateWindowExW
FindWindowW
PostMessageW
EnableMenuItem
SetFocus
PostQuitMessage
SetDlgItemTextW
DefWindowProcW
GetClientRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgItemTextW
GetDlgItem
EnableWindow
EndDialog
IsDlgButtonChecked
SetScrollRange
GetParent
DialogBoxParamW
LoadStringW
gdi32
UnrealizeObject
BitBlt
StretchBlt
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
CreatePen
CombineRgn
CreateRoundRectRgn
CreateRectRgn
CreateFontIndirectW
CreateBitmap
ExtTextOutW
SetBkColor
DeleteDC
DeleteObject
GetStockObject
SetTextColor
PatBlt
SetBrushOrgEx
CreatePatternBrush
GetObjectW
GetDeviceCaps
comdlg32
ChooseFontW
shell32
CommandLineToArgvW
msvcp60
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
Sections
.text Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ