Static task
static1
Behavioral task
behavioral1
Sample
09430f5fcc56c62df6a2902207ccbab0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
09430f5fcc56c62df6a2902207ccbab0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
09430f5fcc56c62df6a2902207ccbab0_JaffaCakes118
-
Size
352KB
-
MD5
09430f5fcc56c62df6a2902207ccbab0
-
SHA1
ad64cf3dc5d8891a62a6289082af03d2010b32a6
-
SHA256
dd456678e828b9aa112251f39d46967e3108bf8bce3cf144068c21559c96b3ae
-
SHA512
6722bfc0a1f5f45847f07e5dba35564dda8bff3dac09c8119f81fdb6dc0179ba2da9682ac6b05d1555b0dad95d6fb05dfb1c406ade40b3aefb294e200771e62e
-
SSDEEP
6144:X7bUEp/57+2ayojc/v+lLlZk1ny9o4NdGqcq6hlzfK042FqlG6JL77w9fb+EJBPM:X7bz/57+2ayojc/v+lLlZGny9o4Nd39v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09430f5fcc56c62df6a2902207ccbab0_JaffaCakes118
Files
-
09430f5fcc56c62df6a2902207ccbab0_JaffaCakes118.exe windows:4 windows x86 arch:x86
f2aff0e67f99eefc941ff33368a85085
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHFileOperationA
SHGetSpecialFolderPathA
SHGetFolderPathA
wininet
InternetCloseHandle
shlwapi
PathRemoveExtensionA
PathFindFileNameA
PathGetArgsA
SHGetValueA
PathAppendA
PathFileExistsA
PathFindExtensionA
PathIsDirectoryA
PathStripToRootA
PathIsUNCA
iphlpapi
GetAdaptersInfo
kernel32
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetThreadLocale
DuplicateHandle
FindClose
FindFirstFileA
GetFullPathNameA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
CreateSemaphoreA
ReleaseSemaphore
GlobalGetAtomNameA
GetCurrentThreadId
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetFilePointer
GetFileTime
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalFlags
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
HeapFree
RtlUnwind
VirtualAlloc
RaiseException
HeapAlloc
HeapReAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
IsDebuggerPresent
GetFileInformationByHandle
PeekNamedPipe
GetFileType
GetProcessHeap
GetStartupInfoA
SetStdHandle
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetConsoleCP
GetConsoleMode
GetACP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
WriteFile
ReadFile
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
RemoveDirectoryA
Sleep
CreateMutexA
lstrcmpA
SetLastError
GetVolumeInformationA
GetCommandLineA
GetFileAttributesA
DeleteFileA
GetVersionExA
GetCurrentProcess
SetPriorityClass
GetShortPathNameA
CreateFileA
DeviceIoControl
OpenProcess
WaitForSingleObject
TerminateProcess
OutputDebugStringA
GetSystemTime
GetTimeZoneInformation
FormatMessageA
LocalFree
LoadResource
LockResource
SizeofResource
FindResourceA
GetComputerNameA
GetSystemTimeAsFileTime
SystemTimeToFileTime
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcatA
MoveFileExA
GetTempPathA
GetModuleFileNameA
CopyFileA
SetCurrentDirectoryA
CreateProcessA
CloseHandle
GetLastError
lstrlenA
lstrcmpiA
WideCharToMultiByte
CompareStringA
CompareStringW
MultiByteToWideChar
GetVersion
InterlockedExchange
user32
SetWindowTextA
UnregisterClassA
DestroyMenu
PostQuitMessage
LoadIconA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetParent
GetWindowLongA
CharUpperA
MessageBoxA
EnumWindows
GetLastActivePopup
IsWindowEnabled
EnableWindow
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
SendMessageA
PostMessageA
FindWindowExA
GetWindowThreadProcessId
SendMessageTimeoutA
RegisterWindowMessageA
FindWindowA
GetWindowTextA
GetWindow
GetDesktopWindow
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSystemMetrics
GetKeyState
PeekMessageA
ValidateRect
IsIconic
gdi32
DeleteObject
GetStockObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateBitmap
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
ole32
CoGetMalloc
StringFromIID
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 272KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ