Static task
static1
Behavioral task
behavioral1
Sample
0ef292d7f2f71a5de2d5f53b0bc57340_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ef292d7f2f71a5de2d5f53b0bc57340_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0ef292d7f2f71a5de2d5f53b0bc57340_JaffaCakes118
-
Size
195KB
-
MD5
0ef292d7f2f71a5de2d5f53b0bc57340
-
SHA1
82b4e80a0bf1d2f459f04be620171fe1a82418bf
-
SHA256
9697283eeb97583a16c8335c25dd836ce6528b431f71c6fb578f0c0157f8483b
-
SHA512
6c63787242582519d17758acf0aba91b2090ea26259abc4e6cf6a47106773914b1c75313f327a45c82280042bea4eca4b2684fd777d4fef9c160a9e621283276
-
SSDEEP
3072:oyQQOhsicmqm0vVjSWgUbIOVnS1jMGS8Is9fun7IFBTViHUFHYHV:9dOhsxmEvVWLUbI8C3S8bmnUFBB3H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ef292d7f2f71a5de2d5f53b0bc57340_JaffaCakes118
Files
-
0ef292d7f2f71a5de2d5f53b0bc57340_JaffaCakes118.exe windows:5 windows x86 arch:x86
5979133a46ac460d32e1be4acee60aa9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
GetFileType
SetHandleCount
GetStringTypeW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
LCMapStringW
RtlUnwind
HeapReAlloc
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapSize
FlushFileBuffers
SetStdHandle
WriteConsoleW
LocalFree
ReadConsoleOutputCharacterW
CloseHandle
FindNextFileW
LocalAlloc
FindClose
GetProcAddress
GetLastError
GetStdHandle
ExitThread
WideCharToMultiByte
GetProcessHeap
GetModuleHandleW
HeapFree
GetCurrentProcess
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetLocaleInfoW
GetUserDefaultLCID
Sleep
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CreateFileW
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EncodePointer
DecodePointer
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
HeapAlloc
FindFirstFileW
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
user32
SendMessageA
SetDlgItemTextA
FindWindowA
EnableWindow
UpdateWindow
EndPaint
DestroyWindow
SetWindowRgn
GetWindowRect
FillRect
DrawTextW
GetParent
LoadMenuA
GetClientRect
BeginPaint
GetForegroundWindow
CreateDialogIndirectParamA
GetWindowTextA
InvalidateRect
DefWindowProcA
IsWindow
gdi32
SelectObject
SwapBuffers
CreateEllipticRgn
EndPage
StartPage
SetTextColor
DeleteDC
GetDeviceCaps
SetDCBrushColor
SetAbortProc
SetBkMode
GetStockObject
CombineRgn
StartDocA
Ellipse
SetDCPenColor
CreateRectRgn
Polyline
GetTextMetricsA
EndDoc
TextOutA
comdlg32
PrintDlgA
advapi32
SetEntriesInAclA
RegCloseKey
FreeSid
AllocateAndInitializeSid
RegCreateKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ole32
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
oleaut32
SysFreeString
VariantClear
VariantInit
gdiplus
GdiplusStartup
opengl32
glTranslatef
glViewport
glMatrixMode
glPolygonMode
glRotatef
glPushMatrix
glPopMatrix
glFlush
glBegin
glEnd
glOrtho
glClearColor
glClear
glVertex2f
glColor3f
glLoadIdentity
glShadeModel
glu32
gluLookAt
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ