Static task
static1
Behavioral task
behavioral1
Sample
26ce8d2d64494967b9dff4bbad924cc1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
26ce8d2d64494967b9dff4bbad924cc1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
26ce8d2d64494967b9dff4bbad924cc1_JaffaCakes118
-
Size
64KB
-
MD5
26ce8d2d64494967b9dff4bbad924cc1
-
SHA1
996701b1fc468da452c51215f61b843b787036e8
-
SHA256
ddcdba632a519aeffdfa77f66cb62b4334851f6d806c0a093f48651bba57c4e2
-
SHA512
aaf646a43967ce69adca1e6bf50dfdab671dd648d0be0f20a8770eec6ae5ebdadd5a006cf2fed9a293aa8fc0e1eaef3b2184c167ad7c3ce1dde01a7fe0392a68
-
SSDEEP
768:C4Ka8qqITrbo5cu7mOgFTkInLTJqDIPDN3dyL05MCHJydqq50/PCWMFPq2/D59BJ:XBFq0b6Z7mOEWsWL05Dgdlqwl7J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ce8d2d64494967b9dff4bbad924cc1_JaffaCakes118
Files
-
26ce8d2d64494967b9dff4bbad924cc1_JaffaCakes118.exe windows:4 windows x86 arch:x86
14b29edfaef83b0226bd52e5025a76f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
FreeLibrary
GetSystemTimeAsFileTime
Sleep
InterlockedDecrement
InterlockedIncrement
CreateFileW
LoadLibraryA
GetModuleFileNameW
GetSystemTimeAsFileTime
InterlockedIncrement
LocalFree
GetModuleFileNameA
GetSystemTimeAsFileTime
GetVersionExA
GetCurrentProcessId
DeleteCriticalSection
SetLastError
QueryPerformanceCounter
GetSystemTimeAsFileTime
LoadLibraryA
HeapDestroy
GetCurrentProcessId
GetCurrentProcess
GetModuleFileNameW
GetModuleFileNameA
GetModuleFileNameA
HeapFree
CreateEventW
GetModuleHandleW
ReadFile
FreeLibrary
InterlockedIncrement
GetCurrentThreadId
GetModuleFileNameW
InterlockedDecrement
HeapFree
FreeLibrary
GetModuleHandleW
HeapFree
LocalAlloc
GetSystemTimeAsFileTime
MultiByteToWideChar
GetProcessHeap
LoadLibraryA
GetCurrentProcessId
GetModuleHandleW
SetLastError
GetCurrentProcessId
LeaveCriticalSection
SetLastError
LocalFree
SetLastError
Sleep
GetLastError
InterlockedExchange
VirtualProtect
GetVersionExA
lstrcmpiW
QueryPerformanceCounter
CreateEventW
CreateFileW
GetModuleFileNameW
LoadLibraryW
EnterCriticalSection
GetCurrentProcessId
InitializeCriticalSection
GetSystemTimeAsFileTime
HeapDestroy
GetModuleHandleA
gdi32
SetBkMode
SetWindowExtEx
GetWindowOrgEx
GetWindowOrgEx
Polygon
SetBkColor
GetBkColor
SetBkColor
CreateFontIndirectA
SetBkMode
RoundRect
SetTextColor
SetBrushOrgEx
StretchBlt
PatBlt
GetBkMode
CreateRectRgn
BitBlt
SetWindowOrgEx
GetWindowOrgEx
MoveToEx
GetCurrentObject
SelectObject
CreateDIBitmap
CreateRectRgn
BitBlt
GetBrushOrgEx
CreateRectRgn
CombineRgn
SetBkMode
GetBkColor
SetTextColor
CreateRectRgn
SetPixel
CreateDIBitmap
CreateFontA
SetBrushOrgEx
GetBrushOrgEx
CreateBitmap
GetWindowOrgEx
CreateDIBitmap
GetWindowOrgEx
SetPixel
SetBkColor
SetPixel
GetWindowOrgEx
GetBkColor
SetWindowOrgEx
CreateDIBSection
CreateDIBSection
CreateBitmap
CreateSolidBrush
CreateDIBSection
CreateCompatibleDC
LineTo
GetWindowExtEx
LineTo
StretchBlt
CreateDIBSection
GetBkMode
SetBkColor
GetBrushOrgEx
SetTextColor
MoveToEx
SetBrushOrgEx
SetBkMode
CreateRectRgn
SetWindowOrgEx
SetBrushOrgEx
user32
GetParent
PeekMessageW
LoadIconW
IsDlgButtonChecked
SetTimer
DefWindowProcW
CreateWindowExW
ShowWindow
BeginPaint
SetWindowTextW
LoadIconW
DispatchMessageW
MessageBoxW
ShowWindow
wsprintfA
GetParent
GetDlgItem
SetDlgItemTextW
BeginPaint
PostQuitMessage
PostMessageW
GetDC
EndDialog
LoadCursorW
EnableWindow
SetWindowTextW
IsDlgButtonChecked
SetWindowTextW
GetDC
LoadCursorW
CreateWindowExW
SetCursor
PeekMessageW
GetWindowLongW
PostMessageW
GetSystemMetrics
wsprintfA
SetWindowTextW
GetParent
wsprintfA
DispatchMessageW
DispatchMessageW
DialogBoxParamW
SetCursor
SetFocus
GetSystemMetrics
LoadIconW
InvalidateRect
SetForegroundWindow
PostQuitMessage
SendMessageW
BeginPaint
LoadCursorW
GetDC
BeginPaint
LoadCursorW
TranslateMessage
GetWindowLongW
DestroyWindow
GetWindowRect
BeginPaint
GetClientRect
CreateWindowExW
SetWindowLongW
MessageBoxW
SetWindowLongW
Sections
.text Size: 51KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ