Static task
static1
Behavioral task
behavioral1
Sample
08cb96756ce67a82a5b5f8cef7fe1744_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
08cb96756ce67a82a5b5f8cef7fe1744_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
08cb96756ce67a82a5b5f8cef7fe1744_JaffaCakes118
-
Size
147KB
-
MD5
08cb96756ce67a82a5b5f8cef7fe1744
-
SHA1
5e301f1247f9a034ce63c3b4db4b8df4e4f5555e
-
SHA256
694e28749e1c34770e90d0a5d132e08b714b40dce58d9f954ad759ccb2cf5e70
-
SHA512
1bed1baba90ac40dadd13e4e57829f26e35f958fe0797d728d7a549ed317e4651a69be178aa7f30209fba034f783ea3dd173d125991608e328734c8b588d8422
-
SSDEEP
3072:LPuZTRxwoc4MrP7faooKbWIP8xTRhbg9lIEK2WlkWx0DwpWRi1xSl:LPoTsoIrP7mJxTRhE9lIJ2ncneT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08cb96756ce67a82a5b5f8cef7fe1744_JaffaCakes118
Files
-
08cb96756ce67a82a5b5f8cef7fe1744_JaffaCakes118.exe windows:1 windows x86 arch:x86
a77e90a36b4672dcba462abec16adbcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
lstrcmpiA
SetErrorMode
lstrlenA
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
GlobalFree
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
VirtualAlloc
VirtualFree
GetFileType
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
ExitProcess
TlsFree
GetCPInfo
GetOEMCP
GetACP
RaiseException
GetCommandLineA
GetEnvironmentStrings
GetStartupInfoA
RtlUnwind
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalGetAtomNameA
lstrcatA
lstrcpyA
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
GetVolumeInformationA
WriteFile
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetLastError
SetLastError
LocalFree
TlsGetValue
LocalAlloc
WritePrivateProfileStringA
lstrcmpA
TlsAlloc
GetVersion
FindResourceA
MulDiv
GetPrivateProfileIntA
LoadResource
LockResource
FreeResource
GlobalAddAtomA
GetPrivateProfileStringA
CloseHandle
TlsSetValue
user32
SendDlgItemMessageA
IsDialogMessageA
GetDC
ReleaseDC
GetWindowDC
SystemParametersInfoA
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
SetCapture
ReleaseCapture
GetDesktopWindow
WindowFromPoint
ClientToScreen
GetClassNameA
SetWindowTextA
CharUpperA
OemToCharA
CharToOemA
LoadStringA
DestroyMenu
InsertMenuA
DeleteMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
IsWindow
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
PtInRect
GetDCEx
LockWindowUpdate
IntersectRect
RegisterWindowMessageA
SetParent
InvertRect
GetSysColor
SetActiveWindow
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
GetDlgCtrlID
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
SetRect
GetWindowTextLengthA
GetWindowTextA
DefWindowProcA
DestroyWindow
CreateWindowExA
SetPropA
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
wsprintfA
DialogBoxIndirectParamA
DialogBoxParamA
GetWindow
GetWindowLongA
EndDialog
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
PeekMessageA
GetCursorPos
UnhookWindowsHookEx
SetWindowsHookExA
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
SetCursor
ShowOwnedPopups
IsWindowVisible
UpdateWindow
PostQuitMessage
PostMessageA
FillRect
GetDlgItem
InvalidateRect
KillTimer
SetWindowPos
ShowWindow
GetWindowRect
IsIconic
GetSystemMetrics
DrawIcon
GetMenuItemID
SendMessageA
GetClientRect
OffsetRect
InflateRect
MoveWindow
SetTimer
LoadIconA
IsChild
GetTopWindow
EndDeferWindowPos
SetMessageQueue
gdi32
CreateSolidBrush
SetTextColor
SetBkColor
GetObjectA
DeleteDC
SaveDC
SelectObject
GetStockObject
RestoreDC
SetBkMode
Ellipse
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
SetTextAlign
DeleteObject
CreateRectRgn
GetDeviceCaps
CreatePen
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetTextExtentPointA
CreateFontIndirectA
PatBlt
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetTextMetricsA
Polygon
BitBlt
CreateCompatibleDC
CreateBitmap
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
shell32
DragQueryFileA
DragFinish
comctl32
ord17
ImageList_Destroy
Sections
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ