?SendPointerW@@YGIPAKGPAHF<V
Static task
static1
Behavioral task
behavioral1
Sample
0eb29c1b2ed101f0eaceab1ccb469372_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0eb29c1b2ed101f0eaceab1ccb469372_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0eb29c1b2ed101f0eaceab1ccb469372_JaffaCakes118
-
Size
198KB
-
MD5
0eb29c1b2ed101f0eaceab1ccb469372
-
SHA1
f3ba77e1365fb0882e01ff370ae0d74080877cbd
-
SHA256
606909a50fadb59fbf7b68172b7921a588d7e3f72ed4d3a0895702adc8fea859
-
SHA512
edafb8b14dbb84d25bbb3f19eb79c09dc2122c13dc7c856b1f7ff06019be8ba4504b5975bf2e53d51498097bb1575dbf3f47a838c0d5f2f1a600d4487203e561
-
SSDEEP
3072:pXqd1jBbdZlAALWos4EebDNjonrDDJ+984BSmcHWRAp:A/jBRf5KOtjorD8X1I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb29c1b2ed101f0eaceab1ccb469372_JaffaCakes118
Files
-
0eb29c1b2ed101f0eaceab1ccb469372_JaffaCakes118.exe windows:5 windows x86 arch:x86
28dd953707a1626966280326de070f96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
TextOutW
DeleteDC
EndPath
EnumFontsW
GetDIBits
SelectObject
CreateBitmapIndirect
EndDoc
CombineRgn
CreateFontW
ExtTextOutA
ExtTextOutW
SetMapMode
GetSystemPaletteEntries
CreateRectRgn
CreateICW
CreateDIBitmap
GetCurrentObject
CreateFontIndirectA
SetWindowOrgEx
SetBkColor
CreateDIBSection
WidenPath
SetDIBColorTable
GetTextCharsetInfo
PatBlt
PtInRegion
TextOutA
RemoveFontResourceW
CreateSolidBrush
SetLayout
SetBrushOrgEx
PolyBezier
GetBitmapBits
RectInRegion
BeginPath
CreateDiscardableBitmap
OffsetViewportOrgEx
GetNearestPaletteIndex
AddFontResourceW
Ellipse
StartPage
CreateHatchBrush
CreatePatternBrush
SetBitmapDimensionEx
GetClipBox
SelectClipRgn
user32
SendMessageTimeoutA
CreateDialogParamW
VkKeyScanW
GetDlgItemInt
DefWindowProcW
DrawStateA
LoadIconA
CopyAcceleratorTableW
RegisterWindowMessageW
GetDlgItemTextA
IsRectEmpty
GetMenuItemInfoW
OffsetRect
DestroyAcceleratorTable
PeekMessageA
GetSysColor
RegisterWindowMessageA
ShowCursor
DrawTextA
DrawEdge
AttachThreadInput
FillRect
LoadBitmapW
SystemParametersInfoA
CharUpperBuffA
ScrollWindow
SetCursorPos
DeleteMenu
FindWindowExA
CreateWindowExW
EndDialog
OpenIcon
UnloadKeyboardLayout
DefDlgProcW
GetUserObjectInformationA
CharToOemW
ArrangeIconicWindows
MapVirtualKeyW
CharToOemBuffA
SendMessageW
CharNextW
SendInput
IsWindowUnicode
SetForegroundWindow
IsChild
IsCharAlphaW
LoadStringW
SendMessageTimeoutW
SetClassLongW
CharUpperA
RedrawWindow
SetWindowTextA
GetWindowLongW
SendDlgItemMessageA
GetClassLongA
SetRect
DrawMenuBar
DrawFrameControl
InSendMessageEx
DestroyMenu
ClipCursor
GetWindow
ShowOwnedPopups
PostThreadMessageA
GetMenuStringA
DrawIcon
DrawStateW
IsDialogMessageW
CallWindowProcW
EndTask
CheckMenuRadioItem
GetAsyncKeyState
DispatchMessageW
wsprintfW
FindWindowW
GetWindowDC
CreateCursor
EndPaint
mouse_event
IsCharUpperA
InSendMessage
GetNextDlgTabItem
FrameRect
PostMessageA
InvertRect
GetMenuItemID
DefFrameProcW
MonitorFromRect
GetClassInfoA
InternalGetWindowText
GetForegroundWindow
ShowScrollBar
SetWindowTextW
MessageBoxW
WindowFromPoint
GetClassInfoExW
AppendMenuA
EnumChildWindows
IntersectRect
SendNotifyMessageW
IsMenu
GetUpdateRgn
keybd_event
GetCaretPos
RegisterHotKey
GetClassLongW
PostThreadMessageW
GetActiveWindow
GetSysColorBrush
DrawTextW
TileWindows
msvcrt
towupper
swprintf
fclose
perror
isprint
islower
atoi
wcsstr
sscanf
_controlfp
strrchr
vsprintf
fgetc
wcslen
free
toupper
setvbuf
clock
iswprint
__set_app_type
__p__fmode
floor
wcsrchr
__p__commode
getenv
setlocale
strncpy
wcscpy
strtok
strchr
_amsg_exit
wcscoll
_initterm
strcoll
_ismbblead
_XcptFilter
_exit
ungetc
putchar
_cexit
__setusermatherr
bsearch
strtoul
__getmainargs
kernel32
LockResource
SetLastError
TlsFree
DefineDosDeviceW
SearchPathW
lstrcmpA
ReleaseSemaphore
SizeofResource
IsValidLocale
FindFirstFileA
GetSystemWindowsDirectoryA
FoldStringW
MapViewOfFileEx
GetSystemInfo
GetProfileIntA
lstrlenA
RemoveDirectoryA
PulseEvent
GlobalFree
GlobalReAlloc
FindFirstChangeNotificationW
lstrcatA
CreateSemaphoreW
FreeLibrary
RtlUnwind
CallNamedPipeW
SetTimerQueueTimer
GlobalGetAtomNameA
CreateEventA
SetFileApisToOEM
GetTimeZoneInformation
CreateSemaphoreA
OpenSemaphoreW
HeapReAlloc
QueryPerformanceCounter
GetFileAttributesExA
GetModuleHandleW
lstrcmpW
GetTickCount
GetUserDefaultLangID
MoveFileA
CreateRemoteThread
GetTempFileNameA
ConnectNamedPipe
GetFullPathNameW
Sleep
GlobalAddAtomA
LoadResource
GetFileAttributesW
CreateFileMappingA
EnterCriticalSection
GetStartupInfoW
Exports
Exports
Sections
.text Size: 164KB - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE