Static task
static1
Behavioral task
behavioral1
Sample
25b480c0fab7614a3488370f8987d1da_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
25b480c0fab7614a3488370f8987d1da_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
25b480c0fab7614a3488370f8987d1da_JaffaCakes118
-
Size
315KB
-
MD5
25b480c0fab7614a3488370f8987d1da
-
SHA1
c4ec04c1e74b5ae55571a048b043b4f05ec214d7
-
SHA256
250215adab7b8797fd58ee7001d38933d35c668a050e46c123b8a89593a28a8a
-
SHA512
f433af092408ccc9dc960c005a05d299031681f8916b95dfcf462accf6c3e3e089a8403ab7466cf91c1475be650c1f8f7fbe6163e3d6b9b18460d3743da2a274
-
SSDEEP
6144:XpdqXK30uperBTJSbl5c8qbApqZ/PYCg8nNgKijXv3Fz4LZrFhDbXhsJkhGkH:XpdqXbu8rBTJi5c8qwq9OQ0Xv3FCrF1B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25b480c0fab7614a3488370f8987d1da_JaffaCakes118
Files
-
25b480c0fab7614a3488370f8987d1da_JaffaCakes118.exe windows:4 windows x86 arch:x86
9dde2fdd2e19f8a586d2a35b0882491a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
DosDateTimeToFileTime
GetDateFormatA
FindAtomA
CopyFileA
EnterCriticalSection
GetConsoleOutputCP
GetStartupInfoA
CreatePipe
GetModuleHandleA
pdh
PdhMakeCounterPathA
PdhEnumObjectItemsA
msvcrt
__p__commode
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__fmode
__set_app_type
_except_handler3
_controlfp
netapi32
NetServerEnum
user32
CreateIconFromResource
MessageBoxW
CharUpperW
InvalidateRect
CreateDesktopA
PostThreadMessageW
DrawIcon
RedrawWindow
ChangeDisplaySettingsExA
WaitForInputIdle
CreateMDIWindowW
ChangeMenuA
VkKeyScanExW
TrackPopupMenu
DlgDirListComboBoxW
GetSystemMetrics
GetKeyboardType
GetDialogBaseUnits
GetPropA
LookupIconIdFromDirectoryEx
SetUserObjectSecurity
SetMenu
IsCharAlphaNumericA
ChildWindowFromPoint
SetWindowLongW
OemToCharBuffA
RegisterClassW
EnumDisplaySettingsW
DlgDirSelectComboBoxExA
NotifyWinEvent
SetCaretBlinkTime
GetMessageTime
GetMenuCheckMarkDimensions
MenuItemFromPoint
ChangeDisplaySettingsExW
CharToOemBuffW
LoadKeyboardLayoutA
GetSysColorBrush
ChildWindowFromPointEx
GetDlgItemTextA
PostMessageA
GetLastActivePopup
DrawStateW
ScrollDC
RemovePropA
InvalidateRgn
LoadKeyboardLayoutW
GetClassInfoExW
DrawStateA
DrawEdge
IntersectRect
CallMsgFilterA
MessageBeep
CreateDialogParamW
GetPropW
LoadStringW
GetClassInfoW
GetWindowLongA
SetWindowContextHelpId
GetWindowDC
AppendMenuW
SetWindowsHookExA
SendDlgItemMessageA
GetMenuState
MapVirtualKeyA
SetWindowPlacement
CheckMenuItem
GetKeyState
DlgDirSelectComboBoxExW
GetClassLongW
EmptyClipboard
SendNotifyMessageA
MsgWaitForMultipleObjectsEx
DdeUninitialize
SetClassWord
DdeDisconnectList
GetKeyboardState
SendMessageCallbackA
IsIconic
GetMessageA
LoadBitmapA
SetTimer
DrawTextExW
EnableMenuItem
GetClassWord
CharLowerA
EnumWindowStationsW
SetWindowTextW
FindWindowExW
CreateDialogIndirectParamA
IsDlgButtonChecked
GetClipCursor
MessageBoxExA
GetMenuStringW
IsWindowVisible
DestroyCaret
UnhookWindowsHook
CreateMDIWindowA
GetKeyboardLayout
SetWindowsHookExW
UnhookWinEvent
IsRectEmpty
InflateRect
GetKeyNameTextA
DispatchMessageW
InSendMessage
SetWindowTextA
EnableWindow
MapDialogRect
ArrangeIconicWindows
InsertMenuA
DestroyWindow
PackDDElParam
DestroyIcon
ReuseDDElParam
SetWindowLongA
CreateIconFromResourceEx
GetSysColor
DdeEnableCallback
FrameRect
DefWindowProcA
SendMessageW
ShowCursor
LoadCursorW
SetDoubleClickTime
SetMenuDefaultItem
BringWindowToTop
WINNLSGetIMEHotkey
CreateAcceleratorTableA
SetProcessWindowStation
DrawTextA
GetWindowPlacement
CharToOemA
PaintDesktop
GetWindowTextA
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ