Static task
static1
Behavioral task
behavioral1
Sample
13207266b5d7c4d603535e818906f8b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13207266b5d7c4d603535e818906f8b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
13207266b5d7c4d603535e818906f8b0_JaffaCakes118
-
Size
662KB
-
MD5
13207266b5d7c4d603535e818906f8b0
-
SHA1
4218c15690f46c00e035d63125c123d068b289d6
-
SHA256
2503b16edbf38b6cca1d17beb2cbf28c00cca733bb6613790eaa3bfac5e5f34e
-
SHA512
2a389731d3841c4cd3e5c421df2a02eed4618748299cbdc110c657adb66acd24046d71f724de260289b6ed9e213f8725665927dbaed6d8cb930daaef72706ae6
-
SSDEEP
12288:OEemfQYLiCw0WxkYPoxMMOf4ay449oFwYIDUrtkiJzaEwAgQrjKPF7eLZrPGojlI:OEeynxWxkYrHfJ4ixJrJ4QHKPF7eFru
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13207266b5d7c4d603535e818906f8b0_JaffaCakes118
Files
-
13207266b5d7c4d603535e818906f8b0_JaffaCakes118.exe windows:5 windows x86 arch:x86
72136192fbc746a5699c5534503f3426
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
OpenProcessToken
RegCreateKeyExA
RegQueryValueExA
GetTokenInformation
RegOpenKeyExA
RegCloseKey
gdi32
SelectObject
GetDeviceCaps
DeleteDC
SetBkColor
BitBlt
SetBkMode
kernel32
GetFullPathNameA
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
SizeofResource
SetStdHandle
InterlockedExchange
GetCurrentThreadId
GetModuleHandleW
GetACP
lstrcpynA
FindFirstFileA
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
CompareStringA
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
FileTimeToLocalFileTime
CreateProcessW
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GlobalFree
lstrlenA
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
CreateFileMappingA
ResetEvent
lstrcpyA
FindNextFileW
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
WriteConsoleW
InterlockedIncrement
GetVersion
SetEndOfFile
GetConsoleMode
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
GetOEMCP
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetCurrentDirectoryA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
FindFirstFileW
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
RtlUnwind
user32
SetCursor
ReleaseDC
CallWindowProcA
EnableMenuItem
GetClientRect
InvalidateRect
IsWindowVisible
SystemParametersInfoA
PostMessageA
GetSysColor
MessageBoxA
EndDialog
GetCursorPos
GetDesktopWindow
TrackPopupMenu
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
CreateWindowExA
PtInRect
GetSubMenu
CheckMenuItem
SetWindowTextA
SetWindowLongA
SetCapture
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
PeekMessageA
SetFocus
EndPaint
FillRect
SetTimer
GetWindowLongA
RegisterClassA
IsIconic
LoadStringA
IsWindowEnabled
TranslateMessage
SetWindowPos
EnableWindow
ShowWindow
UpdateWindow
GetParent
DestroyWindow
SendMessageA
DrawTextA
GetDC
DispatchMessageA
IsWindow
PostQuitMessage
DestroyMenu
SetForegroundWindow
ole32
CoTaskMemFree
CoInitialize
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Sections
.text Size: 560KB - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ