Static task
static1
Behavioral task
behavioral1
Sample
12e0b956e58d0a7edace80a6109d43e0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12e0b956e58d0a7edace80a6109d43e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
12e0b956e58d0a7edace80a6109d43e0_JaffaCakes118
-
Size
152KB
-
MD5
12e0b956e58d0a7edace80a6109d43e0
-
SHA1
133edb88e0ab341c7353dd17f139aa0a5b63441c
-
SHA256
eeac19c79328f51bc15cecf10d158d45b881e40ff988592f0698bc98a6333e05
-
SHA512
ee637422e200d7356c6a64172530ed19b01ce3f61a9fb9041580f1fa39d3507ffbb7d49e65b3b1740671703e5aee6928c1f1d1bc6ab024e42687edfcf74f6f0b
-
SSDEEP
3072:8X/4eI9RNZAOKCQp5hhPo9FSS3MSYSBISN4SEGSQSi/Sw/SsSv:a/1FbhLScSYSGSmS9SQSkSeSsSv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12e0b956e58d0a7edace80a6109d43e0_JaffaCakes118
Files
-
12e0b956e58d0a7edace80a6109d43e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
1042f249352088f5c8d4f8a3b1728f12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerLanguageNameA
kernel32
WinExec
GetDriveTypeA
DeleteFileA
GetVersionExA
GetModuleHandleA
GetSystemInfo
FindFirstFileA
IsDBCSLeadByte
GlobalFree
lstrlenA
lstrcpyA
FlushFileBuffers
GetModuleFileNameA
GetWindowsDirectoryA
SetFilePointer
WriteFile
GetLastError
GetTickCount
MulDiv
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrcatA
lstrcmpiA
GlobalHandle
GetUserDefaultLCID
FindResourceA
GetProfileStringA
SetErrorMode
LoadLibraryA
FreeLibrary
CreateFileA
GetFileSize
GlobalAlloc
CloseHandle
GlobalLock
ReadFile
GlobalUnlock
FindClose
GetDiskFreeSpaceA
WritePrivateProfileStringA
LCMapStringW
HeapReAlloc
GetProcAddress
HeapAlloc
SetEnvironmentVariableA
VirtualAlloc
GetACP
CompareStringW
GetOEMCP
GetCPInfo
GetStringTypeW
CompareStringA
LCMapStringA
GetStringTypeA
SetStdHandle
MultiByteToWideChar
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
CreateDirectoryA
user32
DestroyWindow
EndDialog
DrawIcon
DialogBoxParamA
GetWindowPlacement
LoadIconA
DestroyIcon
SetRectEmpty
FillRect
LoadStringA
wsprintfA
PostQuitMessage
SetWindowTextA
GetDlgItem
InflateRect
SendMessageA
SetWindowLongA
InvalidateRect
BeginPaint
EndPaint
DefWindowProcA
GetWindowLongA
GetDC
ReleaseDC
LoadCursorA
GetClassInfoA
RegisterClassA
MoveWindow
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
CharUpperA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
MessageBoxA
PostMessageA
FindWindowA
SubtractRect
SetWindowPos
GetClassNameA
IntersectRect
EqualRect
GetWindow
ScreenToClient
GetClientRect
UpdateWindow
SetTimer
ShowWindow
IsWindow
RegisterWindowMessageA
CreateDialogParamA
GetParent
SendDlgItemMessageA
CharNextA
SetRect
GetSystemMetrics
GetSysColor
CreateWindowExA
DrawTextA
gdi32
RestoreDC
DeleteObject
CreateFontIndirectA
GetObjectA
SaveDC
LineTo
MoveToEx
CreatePen
ExtTextOutA
SetBkColor
SetTextColor
GetTextMetricsA
CreateSolidBrush
CreateDIBitmap
RealizePalette
SelectPalette
GetDeviceCaps
CreatePalette
GetSystemPaletteEntries
UnrealizeObject
DeleteDC
BitBlt
CreateCompatibleDC
SelectClipRgn
CreateRectRgn
GetStockObject
GetTextExtentPointA
SelectObject
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ