Static task
static1
Behavioral task
behavioral1
Sample
166fee008448d5cb1914c83a0227c7c3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
166fee008448d5cb1914c83a0227c7c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
166fee008448d5cb1914c83a0227c7c3_JaffaCakes118
-
Size
300KB
-
MD5
166fee008448d5cb1914c83a0227c7c3
-
SHA1
1ef114948d1fe8339a71367fbb259e73e9460a41
-
SHA256
62424646a10265229f2ba5019c07945a7db37cba86ee9fcf6bc7ae344e878e5b
-
SHA512
f803d4ccdd0f75fcc73fd3bfef8b2224a4e3bcfde88a3caeb8315f1901dcab4f1d2aac058147725cc56df00b05405426563da6d261c89e33ae37e86410638321
-
SSDEEP
6144:7LnWi/+ALlhK6pyGoKhkhyHhFYb3kV4SfmKFRta1hoV2wy:77WiGA5JdomGyHhFY+DFRQIV2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 166fee008448d5cb1914c83a0227c7c3_JaffaCakes118
Files
-
166fee008448d5cb1914c83a0227c7c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
1aeb30c40fd9dc598b641dff628b9c8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectA
Ellipse
LineDDA
GetNearestColor
GetDeviceCaps
GetTextExtentPoint32A
CreatePatternBrush
EnumFontFamiliesExW
SetBkColor
SaveDC
GetTextMetricsW
CreatePen
LineTo
GetPaletteEntries
GetRegionData
InvertRgn
EnumFontFamiliesExA
DPtoLP
ole32
RegisterDragDrop
CreateFileMoniker
CoRevokeClassObject
OleLockRunning
StgOpenStorage
ReleaseStgMedium
OleQueryCreateFromData
CoResumeClassObjects
OleQueryLinkFromData
GetRunningObjectTable
IIDFromString
StgIsStorageFile
advapi32
CryptGetHashParam
BuildExplicitAccessWithNameW
GetSidIdentifierAuthority
SetSecurityDescriptorGroup
RegNotifyChangeKeyValue
GetLengthSid
RegOpenKeyExA
shell32
SHGetDesktopFolder
DragFinish
SHBrowseForFolderA
kernel32
CreateSemaphoreA
GlobalUnlock
MapViewOfFile
VirtualProtect
TlsAlloc
GetConsoleOutputCP
GetModuleHandleA
GetStartupInfoA
GlobalMemoryStatus
WritePrivateProfileStringA
GetWindowsDirectoryW
HeapAlloc
VirtualAlloc
InterlockedCompareExchange
GetConsoleMode
GetExitCodeProcess
SetCurrentDirectoryW
TransactNamedPipe
OutputDebugStringW
BackupRead
GetDriveTypeA
GetFullPathNameA
GetFileTime
CreateThread
LocalFileTimeToFileTime
GetSystemPowerStatus
SetEvent
CreateToolhelp32Snapshot
lstrlenW
FreeEnvironmentStringsA
GetFileType
CreateSemaphoreW
InitializeCriticalSection
GetPrivateProfileIntA
GetDiskFreeSpaceW
SetLastError
GlobalGetAtomNameA
GetShortPathNameW
GetDriveTypeW
GetPriorityClass
FindResourceW
DebugBreak
GetSystemDefaultLangID
MapViewOfFileEx
GetThreadLocale
IsValidCodePage
GetStringTypeW
GetStartupInfoW
HeapReAlloc
InitializeCriticalSectionAndSpinCount
CreateTimerQueue
GetDiskFreeSpaceA
QueryPerformanceFrequency
FindResourceExW
InterlockedIncrement
ReadFile
GetTempFileNameW
FlushFileBuffers
GetCurrentProcess
WaitForSingleObject
WinExec
SetFilePointer
FileTimeToDosDateTime
LCMapStringW
GetVersionExA
EnumCalendarInfoA
WaitForMultipleObjects
SetUnhandledExceptionFilter
RemoveDirectoryA
SetHandleCount
LocalUnlock
comctl32
_TrackMouseEvent
ImageList_Remove
ImageList_GetIconSize
user32
RegisterClipboardFormatW
wsprintfW
RegisterWindowMessageA
LoadCursorA
GetMenuStringW
IsWindowEnabled
GetScrollRange
GetClassInfoExA
DdeInitializeW
PostQuitMessage
CreateWindowExW
EndDialog
PostThreadMessageA
ReuseDDElParam
GetPropW
GetSystemMenu
PostMessageA
DdeConnectList
AppendMenuA
GetWindowDC
SetWindowTextW
GetMenuItemInfoW
SetCursor
EnumChildWindows
DestroyMenu
GetWindowPlacement
LoadStringA
EnumClipboardFormats
SetWindowRgn
TrackPopupMenu
OpenClipboard
MessageBeep
IsChild
MessageBoxW
ShowWindow
CreateIcon
GetMessageTime
DefWindowProcW
DispatchMessageA
GetClassNameW
DrawStateW
DrawTextExW
FrameRect
CharToOemBuffA
DrawIcon
CallWindowProcW
ModifyMenuA
EndMenu
DrawMenuBar
SetWindowTextA
DrawTextExA
SetMenuItemInfoW
OffsetRect
NotifyWinEvent
CreateCaret
CharLowerBuffA
GetMonitorInfoW
GetMenuItemCount
ScrollWindow
DefMDIChildProcA
LoadIconA
GetKeyboardType
LoadImageW
msvcrt
_acmdln
_beginthreadex
wcsspn
wcsrchr
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
exit
_XcptFilter
_wtoi
setlocale
__getmainargs
fclose
_itoa
towupper
_ecvt
_fpreset
strncpy
_wcsdup
_wcsicmp
iswalnum
_vsnprintf
atoi
wcstol
strstr
_strnicmp
wcspbrk
_strlwr
strncmp
toupper
_splitpath
time
atof
_stricmp
isspace
iswspace
srand
longjmp
free
_expand
_itow
iswdigit
wcstok
atol
_wcsupr
wcsncpy
ctime
strrchr
_purecall
_exit
_c_exit
_CxxThrowException
Sections
.text Size: 220KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ