Static task
static1
Behavioral task
behavioral1
Sample
17c11277c68e92991724e7a27d7aba88_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17c11277c68e92991724e7a27d7aba88_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
17c11277c68e92991724e7a27d7aba88_JaffaCakes118
-
Size
272KB
-
MD5
17c11277c68e92991724e7a27d7aba88
-
SHA1
dad98e571e20a9d1fd735355152f81481daadaac
-
SHA256
b6b8f7474bd4396951bd36a159a22193863ee838c83501ddf6ab67dd65968998
-
SHA512
9785e5c0d89fa578237153007bc93e1c2321b46c7a8a40d05b1c4829ead6a82f737c34af4292bbfd78aab4e49ad53481e108b8f45dcf9d86f37c97f589af2d5e
-
SSDEEP
3072:D7SFPMXqW4rsVUnm3dBLHbZ2G9iBnkEjzOCJGbcTnpCco9d82QPfmKgPtqKIAo:D2FPM6D/nmnsG9iBnzenR9dsko
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17c11277c68e92991724e7a27d7aba88_JaffaCakes118
Files
-
17c11277c68e92991724e7a27d7aba88_JaffaCakes118.exe windows:4 windows x86 arch:x86
6258a761e87676dec472ae7cafd1013e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateProcessA
GetModuleFileNameA
CloseHandle
CreateMutexA
GetCurrentThreadId
CreateEventA
WaitForSingleObject
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GlobalLock
GlobalUnlock
GlobalAlloc
InterlockedIncrement
InterlockedDecrement
lstrcmpA
LockResource
FreeResource
GlobalFree
GlobalHandle
GetShortPathNameA
GetModuleHandleA
MulDiv
TerminateThread
CreateThread
ExitThread
GetDateFormatA
lstrcpynA
CreateDirectoryA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
lstrcmpiA
GetCPInfo
LCMapStringW
LCMapStringA
WriteFile
TlsGetValue
TlsAlloc
TlsSetValue
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
HeapCreate
GetEnvironmentVariableA
VirtualAlloc
VirtualFree
HeapSize
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
HeapReAlloc
GetSystemTime
GetProcAddress
FreeLibrary
GetCurrentProcess
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
SetEvent
CopyFileA
GetFileAttributesA
GetTickCount
CompareStringW
CompareStringA
lstrlenW
LoadLibraryA
FindResourceExA
FindResourceA
LoadResource
GetVersionExA
GetUserDefaultLangID
lstrcpyA
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
SetLastError
GetWindowsDirectoryA
user32
IsWindow
BeginPaint
FillRect
EndPaint
GetFocus
IsChild
SetFocus
GetSysColor
RedrawWindow
GetClassNameA
GetDesktopWindow
CreateAcceleratorTableA
ReleaseCapture
SetCapture
GetParent
ReleaseDC
DrawTextA
SendMessageA
GetDC
CopyRect
GetClientRect
InvalidateRect
ShowWindow
ScreenToClient
SetWindowPos
GetWindowRect
SetWindowTextA
InvalidateRgn
AppendMenuA
GetSystemMenu
SetForegroundWindow
UpdateWindow
SetCursor
PtInRect
SetTimer
LoadBitmapA
GetSysColorBrush
CreateWindowExA
GetDlgItem
wsprintfA
EndDialog
CallWindowProcA
GetWindowTextLengthA
GetWindowTextA
RegisterWindowMessageA
GetClassInfoExA
RegisterClassExA
DialogBoxIndirectParamA
DialogBoxParamA
CreateDialogIndirectParamA
CreateDialogParamA
GetMessageA
MsgWaitForMultipleObjects
GetActiveWindow
FindWindowA
DefWindowProcA
CharLowerA
MessageBoxA
DestroyWindow
EnableWindow
LoadCursorA
SetClassLongA
PostQuitMessage
GetSystemMetrics
LoadImageA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
GetWindowLongA
GetWindow
SystemParametersInfoA
MapWindowPoints
SetWindowLongA
GetDlgCtrlID
gdi32
SetBkMode
CreateFontIndirectA
SetTextColor
GetStockObject
GetObjectA
CreateSolidBrush
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
SelectObject
GetDeviceCaps
advapi32
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
ole32
OleLockRunning
CoTaskMemAlloc
StringFromCLSID
CoTaskMemFree
CLSIDFromProgID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
oleaut32
VariantCopy
VariantChangeType
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
SysFreeString
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
comctl32
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ord17
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ