d:\pcssahoy\
Static task
static1
Behavioral task
behavioral1
Sample
0ad302ad73dc5d4cb8bde47bd5e44ffa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ad302ad73dc5d4cb8bde47bd5e44ffa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ad302ad73dc5d4cb8bde47bd5e44ffa_JaffaCakes118
-
Size
324KB
-
MD5
0ad302ad73dc5d4cb8bde47bd5e44ffa
-
SHA1
696b0fc8736904f1373f1256501b17022f7b849e
-
SHA256
a79b89c09d7d5a39d22405bbfd94b5e5cac247a1a3208d4fb5e3e83e030fc0a0
-
SHA512
70f594cf6348e7543e876e844162e8cfdb943961b41e75da51147d5833f31ec82f46dc9473eca4621de10b88a907efb6aa5b71473ffe65283551534a230c9d33
-
SSDEEP
6144:r226/31X5OgNwGcSIURy/axsx72x1jTE0DX6vUbBa:rVQ1pbNwjSIURWaxGor6vMB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ad302ad73dc5d4cb8bde47bd5e44ffa_JaffaCakes118
Files
-
0ad302ad73dc5d4cb8bde47bd5e44ffa_JaffaCakes118.exe windows:4 windows x86 arch:x86
43892e90230356afa64e709796c00b4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
user32
MapWindowPoints
GetKeyState
SetScrollPos
PostThreadMessageA
EmptyClipboard
DeleteMenu
GetSysColorBrush
GetNextDlgTabItem
ShowOwnedPopups
LoadCursorA
LockWindowUpdate
LoadMenuA
GetMenu
TabbedTextOutA
SetMenuDefaultItem
GetCapture
EndDialog
IsWindowEnabled
SetScrollInfo
GetClassInfoA
IntersectRect
GetWindowTextA
LoadBitmapA
UnregisterClassA
wsprintfA
GetMessagePos
IsZoomed
CreateIconIndirect
SetTimer
TranslateMessage
ScreenToClient
BeginPaint
ScrollWindowEx
GetCursorPos
GetDlgItem
SetWindowLongA
GetDC
EqualRect
UnhookWindowsHookEx
SetActiveWindow
TrackPopupMenuEx
GetMenuStringA
DrawTextExA
GetDesktopWindow
GetFocus
IsRectEmpty
ShowWindow
SetWindowTextA
IsWindow
CopyRect
ShowCaret
SetDlgItemTextA
CharUpperA
SetForegroundWindow
GetDCEx
CopyAcceleratorTableA
UpdateWindow
GetActiveWindow
EndPaint
CharNextA
GetSubMenu
DrawTextA
DispatchMessageA
GetForegroundWindow
SetFocus
DrawFocusRect
SystemParametersInfoA
GetMenuItemInfoA
SetCapture
DrawFrameControl
MessageBoxA
UnionRect
MessageBeep
WinHelpA
LoadIconA
HideCaret
GetWindowTextLengthA
GetParent
ReleaseDC
PtInRect
LoadStringA
RegisterClassExA
SetWindowRgn
DestroyAcceleratorTable
SendMessageA
DestroyCursor
AppendMenuA
GetClipboardData
SetWindowPlacement
EnableWindow
CreatePopupMenu
DrawMenuBar
InvalidateRect
DestroyIcon
GetWindowLongA
SetCursor
DrawIconEx
GetClassLongA
DrawStateA
TranslateAcceleratorA
IsIconic
SetWindowsHookExA
WaitForInputIdle
DefWindowProcA
InflateRect
WindowFromPoint
DestroyCaret
MoveWindow
KillTimer
GetWindow
DrawIcon
GetSystemMenu
PostQuitMessage
RegisterClassA
InsertMenuItemA
IsChild
FillRect
GetSystemMetrics
IsDlgButtonChecked
DestroyWindow
PeekMessageA
RemovePropA
CreateWindowExA
GetIconInfo
CreateDialogIndirectParamA
InvertRect
GetWindowRect
GetKeyNameTextA
InsertMenuA
GetScrollRange
GetMessageA
GetMenuItemCount
ClientToScreen
CallWindowProcA
DeferWindowPos
SetMenu
ReleaseCapture
RegisterWindowMessageA
gdi32
StretchDIBits
CreatePolygonRgn
GetBrushOrgEx
FrameRgn
SetViewportExtEx
PolyBezierTo
AbortDoc
AngleArc
SetBoundsRect
GetDeviceCaps
CreateEnhMetaFileA
SaveDC
WidenPath
CreateRoundRectRgn
CreatePatternBrush
CreateDiscardableBitmap
FillPath
RoundRect
Ellipse
ExtCreatePen
CreateBitmap
ExcludeClipRect
DrawEscape
GetNearestPaletteIndex
FloodFill
FillRgn
SetBitmapBits
SetWindowExtEx
CreateMetaFileA
GetCharABCWidthsFloatA
PlayMetaFile
GetPixel
Polygon
SetRectRgn
SetPixel
GetKerningPairsA
GetOutlineTextMetricsA
RestoreDC
GetObjectType
CreateHatchBrush
BitBlt
GetColorAdjustment
CreateHalftonePalette
DeleteDC
OffsetClipRgn
PlayEnhMetaFile
OffsetRgn
GetBoundsRect
BeginPath
PlgBlt
SetAbortProc
GetBkMode
GdiComment
SetMapMode
SetBkMode
Arc
CloseEnhMetaFile
PtInRegion
DeleteMetaFile
StartDocA
LPtoDP
GetObjectA
CreateCompatibleBitmap
AbortPath
Polyline
CreateBitmapIndirect
ResetDCA
SetROP2
CreatePalette
AnimatePalette
ExtEscape
EndPath
DeleteObject
CreateDCA
SetBrushOrgEx
RectInRegion
GetViewportOrgEx
GetPaletteEntries
EnumObjects
CreatePolyPolygonRgn
CreateFontIndirectA
SetMiterLimit
StretchBlt
GetCharWidthFloatA
CreateSolidBrush
CloseMetaFile
CreateBrushIndirect
GetRegionData
CreateEllipticRgnIndirect
SetTextJustification
ExtTextOutA
GetAspectRatioFilterEx
UpdateColors
PatBlt
GetMiterLimit
GetViewportExtEx
GetRgnBox
GetGlyphOutlineA
GetTextMetricsA
comctl32
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddMasked
shell32
ord155
DragQueryPoint
kernel32
VirtualQuery
LCMapStringW
GetEnvironmentStringsW
QueryPerformanceCounter
InterlockedExchange
TlsAlloc
GetEnvironmentStrings
GetOEMCP
HeapReAlloc
GetSystemInfo
SetLastError
HeapCreate
TlsGetValue
GetACP
GetTimeZoneInformation
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersionExA
UnhandledExceptionFilter
GetCommandLineA
EnterCriticalSection
GetLocaleInfoA
SetUnhandledExceptionFilter
InterlockedIncrement
GetTickCount
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetFileType
MultiByteToWideChar
InitializeCriticalSection
DebugBreak
GetProcAddress
IsBadWritePtr
SetEnvironmentVariableA
GetCurrentProcessId
CloseHandle
IsBadCodePtr
GetModuleFileNameA
DeleteCriticalSection
VirtualProtect
GetCurrentThreadId
TlsSetValue
IsBadReadPtr
HeapAlloc
LoadLibraryA
CompareStringW
LeaveCriticalSection
RaiseException
TlsFree
HeapDestroy
FreeEnvironmentStringsA
HeapValidate
SetStdHandle
HeapFree
GetStdHandle
VirtualFree
GetCurrentProcess
SetFilePointer
WriteFile
LCMapStringA
GetModuleHandleA
InterlockedDecrement
FreeEnvironmentStringsW
GetLastError
ReadFile
VirtualAlloc
CompareStringA
TerminateProcess
CreateMutexA
GetDateFormatA
OutputDebugStringA
RtlUnwind
ExitProcess
GetCPInfo
GetTimeFormatA
WideCharToMultiByte
SetHandleCount
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ