Static task
static1
Behavioral task
behavioral1
Sample
0e86b39b1b8ae35bd889e75646d2f666_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0e86b39b1b8ae35bd889e75646d2f666_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
0e86b39b1b8ae35bd889e75646d2f666_JaffaCakes118
-
Size
362KB
-
MD5
0e86b39b1b8ae35bd889e75646d2f666
-
SHA1
87d51d9648c552b454bd979ee4db5dccb88eb6cd
-
SHA256
f488605463b4d97df19a76fe74e6be0303a7c2f1c8c35e7ba944d4c6cefefc7b
-
SHA512
1d95ce6b9f7d5fbfb9270a2e27da3eacfb45255e181a77729b9b08a18aab1f3c662a68e7376ecc336a372f08e9a3d9a462e677ab184785baab86825d199007c3
-
SSDEEP
6144:DeMOOhO5/YE7yPYv7NMmMA4E+0EH18jn39mBTHd0bqjyhNn/Mdf868Vf:DezOKYE7GkR4J6D3cLSqjSok3Vf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e86b39b1b8ae35bd889e75646d2f666_JaffaCakes118
Files
-
0e86b39b1b8ae35bd889e75646d2f666_JaffaCakes118.exe windows:4 windows x86 arch:x86
d45b0897177060aabc5924cc4cde2712
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetLengthSid
RegCreateKeyExA
RegOpenKeyA
RegLoadKeyA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
user32
GetDesktopWindow
EnableScrollBar
FrameRect
FillRect
EnumThreadWindows
GetClassInfoA
EnableMenuItem
GetForegroundWindow
GetCursorPos
DrawTextA
GetClassNameA
DrawIconEx
DrawMenuBar
EnumWindows
GetCursor
GetClipboardData
GetFocus
EnableWindow
GetActiveWindow
EndPaint
EmptyClipboard
GetDC
GetClassLongA
GetClientRect
GetDlgItem
GetDCEx
EqualRect
FindWindowA
EnumChildWindows
GetCapture
comctl32
ImageList_Write
ImageList_DrawEx
ImageList_Remove
ImageList_Read
ImageList_Add
msvcrt
memcpy
memset
acos
atol
rand
gdi32
BitBlt
CreateBrushIndirect
CreateDIBitmap
GetDIBits
GetObjectA
GetDIBColorTable
GetDCOrgEx
RestoreDC
SetTextColor
CreateBitmap
LineTo
CreateFontIndirectA
GetClipBox
SetPixel
SetBkMode
CreateDIBSection
GetPaletteEntries
GetRgnBox
CreateCompatibleBitmap
CreateCompatibleDC
GetCurrentPositionEx
SetBkColor
SelectPalette
CopyEnhMetaFileA
SelectObject
CreatePalette
CreatePenIndirect
GetBitmapBits
GetPixel
SaveDC
kernel32
GetStringTypeW
GetLocaleInfoA
VirtualAllocEx
GetCommandLineA
GlobalAddAtomA
InitializeCriticalSection
GetSystemDefaultLangID
ExitThread
GlobalFindAtomA
GetLocalTime
LockResource
GetThreadLocale
VirtualAlloc
LoadLibraryExA
IsBadReadPtr
GlobalDeleteAtom
GetCommandLineW
GetStringTypeA
GetVersionExA
GetStartupInfoA
GetOEMCP
LoadResource
RaiseException
GetModuleHandleA
GetProcessHeap
GetModuleHandleW
GetACP
ExitProcess
HeapFree
GetStdHandle
GlobalAlloc
GetUserDefaultLCID
LoadLibraryA
lstrlenA
GetProcAddress
HeapAlloc
GetModuleFileNameA
GetTickCount
GetVersion
Sections
.text Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 449B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc9 Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc4 Size: 1024B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc0 Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc7 Size: 512B - Virtual size: 465B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc3 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ