Static task
static1
Behavioral task
behavioral1
Sample
259c1ea7d73d5adbf61e53de73837abf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
259c1ea7d73d5adbf61e53de73837abf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
259c1ea7d73d5adbf61e53de73837abf_JaffaCakes118
-
Size
168KB
-
MD5
259c1ea7d73d5adbf61e53de73837abf
-
SHA1
8f34e978a89e8db2dc673b30c45347221d369b25
-
SHA256
96f6ccd8ad0a1ea26e3730369e4e32bcd872f2d260abdae45b85954ce67e94d1
-
SHA512
92b7f7c2c1af05d3a9a0e5a2ccd45c204b796eebea5360b3bbc3e8fc70311d0ea934887dff2ffc07f70cc244be7ab4459e6fe5ef8468429d0e0e1995af43376d
-
SSDEEP
3072:oYSy/ORI+KaN4yycj5iRcuHq71GiWlAsiQzIj2nbZmFjAxCKE9x1:oYrqI+PBH5ycWlAf2bZwj2CVT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 259c1ea7d73d5adbf61e53de73837abf_JaffaCakes118
Files
-
259c1ea7d73d5adbf61e53de73837abf_JaffaCakes118.exe windows:1 windows x86 arch:x86
cdd7fe3b74e7588b9f35da88b9f7a1ed
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
WriteConsoleA
GetEnvironmentStrings
ExpandEnvironmentStringsA
ResumeThread
ExitThread
FindResourceA
ExitProcess
GetStartupInfoA
InterlockedExchange
TlsSetValue
LocalFree
DeviceIoControl
FileTimeToSystemTime
TerminateProcess
GetVersionExA
GetTimeFormatA
WriteFile
GetModuleHandleA
LeaveCriticalSection
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
WideCharToMultiByte
VirtualFree
GetSystemInfo
Module32Next
LocalAlloc
ResetEvent
CloseHandle
DuplicateHandle
EnterCriticalSection
lstrcatA
FreeEnvironmentStringsA
WriteConsoleW
lstrcpyA
QueryPerformanceCounter
VirtualQueryEx
TlsAlloc
GetProcAddress
CreateFileMappingA
SetThreadAffinityMask
InterlockedDecrement
CreateEventA
GetProcessWorkingSetSize
HeapAlloc
DeleteCriticalSection
FileTimeToLocalFileTime
IsValidCodePage
HeapSize
FlushFileBuffers
HeapReAlloc
GetExitCodeThread
LoadLibraryA
InterlockedIncrement
OpenProcess
SetStdHandle
SetEndOfFile
InitializeCriticalSection
GetCurrentThreadId
GetVersion
GetFileTime
GetLastError
user32
DefMDIChildProcA
GetCursorPos
CreateIconIndirect
ExitWindowsEx
IsIconic
DestroyIcon
CheckMenuItem
IsWindowVisible
GetClassLongA
LoadMenuA
DialogBoxIndirectParamA
SetFocus
GetWindowRect
BeginPaint
MoveWindow
IsDialogMessageA
GetDlgItemTextA
FindWindowExA
SetForegroundWindow
SetTimer
OffsetRect
EmptyClipboard
ReleaseDC
RegisterWindowMessageA
ShowWindow
DispatchMessageA
GetCapture
LoadIconA
DialogBoxParamA
RemoveMenu
GetWindowThreadProcessId
KillTimer
GetDesktopWindow
ScrollWindowEx
DrawIconEx
DrawFrameControl
DefFrameProcA
PtInRect
InsertMenuA
FindWindowA
SetWindowPos
EnumWindows
GetSysColor
OpenClipboard
GetMenuItemCount
GetDC
EnableMenuItem
wsprintfA
TranslateMessage
EnableWindow
ClientToScreen
InvalidateRgn
RegisterClassExA
DeferWindowPos
PostQuitMessage
MessageBoxA
SetCursor
MapWindowPoints
GetSysColorBrush
GetWindowLongA
GetWindow
CheckDlgButton
GetSubMenu
GetWindowTextA
GetMessageA
SetScrollInfo
LoadAcceleratorsA
CopyRect
GetClientRect
gdi32
Rectangle
CreatePen
StartDocA
DeleteDC
CreateRectRgn
SetTextColor
EndDoc
RectInRegion
SelectObject
SetBkColor
MoveToEx
Polyline
RestoreDC
GetTextExtentPoint32A
EndPage
GetDeviceCaps
SaveDC
GetObjectA
LineTo
SetBkMode
DeleteObject
GetBkMode
CreateDIBSection
GetTextMetricsA
SetROP2
GetBkColor
StartPage
CreateCompatibleBitmap
SetMapMode
CreateFontIndirectA
BitBlt
CreateRectRgnIndirect
msvcrt
_exit
memcpy
_controlfp
_initterm
exit
__set_app_type
_acmdln
_adjust_fdiv
__p__fmode
__setusermatherr
__p__commode
_XcptFilter
_except_handler3
__getmainargs
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ