Static task
static1
Behavioral task
behavioral1
Sample
098d9d7bc8d9b0736f77cc2fa1517240_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
098d9d7bc8d9b0736f77cc2fa1517240_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
098d9d7bc8d9b0736f77cc2fa1517240_JaffaCakes118
-
Size
947KB
-
MD5
098d9d7bc8d9b0736f77cc2fa1517240
-
SHA1
6ef61d3496841ad2b62adcb702e4999306d48ccc
-
SHA256
f47b1ee87417b533dd6a22a73895fdc195391dc557a4ba0de0db1e692590ee03
-
SHA512
3f9d1cf4113b6b770b7b9e62079f8319520c22aea521ca3dbebee97c6599d39833026857e49cd5a7bfc49275e26c82f1f46dc893b76c36b2b4f625a81e8cfc4e
-
SSDEEP
24576:Y1ch1/nQevAusIJcSR+iVZ3O2WsJqPyAu4qLlI7:Ey1YI6SR3Z3O2sf6I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 098d9d7bc8d9b0736f77cc2fa1517240_JaffaCakes118
Files
-
098d9d7bc8d9b0736f77cc2fa1517240_JaffaCakes118.exe windows:4 windows x86 arch:x86
8b9199397385784b7ec807f95b154cae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnableWindow
GetDlgItem
GetWindowLongA
GetClientRect
SendDlgItemMessageA
SetActiveWindow
SetWindowTextA
GetSysColor
InvalidateRect
SetWindowLongA
OffsetRect
GetFocus
DrawTextA
ScreenToClient
MessageBoxA
EndPaint
GetMessageA
SetCapture
GetKeyState
BeginPaint
TranslateMessage
SetCursorPos
PeekMessageA
DefWindowProcA
GetCursorPos
SetTimer
ReleaseCapture
GetClassNameA
GetForegroundWindow
GetWindow
GetWindowRect
GetDC
ShowCursor
ReleaseDC
EndDialog
SetWindowPos
DialogBoxParamA
SetDlgItemTextA
WaitForInputIdle
GetDesktopWindow
GetParent
EnumWindows
PostMessageA
GetWindowThreadProcessId
RegisterClassExA
GetTopWindow
FindWindowA
UpdateWindow
LoadImageA
KillTimer
SendMessageA
GetActiveWindow
SetRect
DispatchMessageA
GetSystemMetrics
IsIconic
ClientToScreen
ClipCursor
ShowWindow
CreateWindowExA
SetFocus
LoadIconA
SetForegroundWindow
GetLastActivePopup
PtInRect
kernel32
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalMemoryStatus
Sleep
CreateEventA
GetDiskFreeSpaceA
CloseHandle
CreateFileA
GetFileAttributesA
EnterCriticalSection
FindFirstFileA
InitializeCriticalSection
FindNextFileA
CreateProcessA
GetDriveTypeA
GetLogicalDriveStringsA
SetEvent
ResetEvent
WaitForMultipleObjects
GetUserDefaultLangID
GetLocalTime
lstrcpynA
SetUnhandledExceptionFilter
IsBadReadPtr
FormatMessageA
CompareFileTime
FindResourceA
LoadResource
SizeofResource
LockResource
WaitForSingleObject
DeleteFileA
MulDiv
FileTimeToSystemTime
FileTimeToLocalFileTime
SetConsoleCtrlHandler
ExitThread
CreateThread
SetStdHandle
FlushFileBuffers
SetEndOfFile
SetFilePointer
LeaveCriticalSection
HeapFree
VirtualFree
HeapCreate
CreateDirectoryA
GetFileSize
FreeLibrary
IsDBCSLeadByte
SetFileAttributesA
GetComputerNameA
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
FindClose
LoadLibraryA
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
TlsAlloc
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetModuleHandleA
WriteFile
GetCurrentProcess
TerminateProcess
GetProcAddress
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
ReadFile
RaiseException
winmm
waveInAddBuffer
SendDriverMessage
midiOutReset
Sections
.text Size: 459KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 469KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ