Static task
static1
Behavioral task
behavioral1
Sample
301e4176045d822f6acfb347b57f258c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
301e4176045d822f6acfb347b57f258c_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
301e4176045d822f6acfb347b57f258c_JaffaCakes118
-
Size
174KB
-
MD5
301e4176045d822f6acfb347b57f258c
-
SHA1
7837afd61d37024bef5a6a3192aa9f074e65e46d
-
SHA256
e896b82f7444da625537162c21ea8282a7edc4fc397fde1ca9e021b91c251a82
-
SHA512
fbe61ad85398915d854863dd1cb045ff8030e0520c2a2530fd1f59e7c7548d692c550a13fc4c3fa57a34e4ebaf2dabfddf75cd5570495f1091d8a7ad03590471
-
SSDEEP
3072:y+0uthTw+bDGC/y8q78HUP6vyasM00iyIPvudC1EN8RBX25HCaCZP9:yQtVw+Ov7Yyas/0iyT4A8P2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 301e4176045d822f6acfb347b57f258c_JaffaCakes118
Files
-
301e4176045d822f6acfb347b57f258c_JaffaCakes118.exe windows:24342 windows x86 arch:x86
2e4411bbff8e4cf212452c36e3d4036f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetObjectW
SetTextColor
CreateCompatibleDC
SetBkColor
LineTo
GetStockObject
StretchBlt
ExtTextOutW
advapi32
FreeSid
OpenProcessToken
RegDeleteKeyW
RegQueryValueExW
user32
LoadStringW
GetDlgItem
LoadStringW
DestroyWindow
DefWindowProcW
GetSystemMetrics
LoadIconW
DefWindowProcW
GetMessageW
GetDlgItem
SendMessageW
ShowWindow
GetDC
LoadStringW
SetTimer
GetDC
GetDlgItem
UpdateLayeredWindow
GetMessageW
DestroyWindow
PostMessageW
LoadIconW
GetWindowRect
LoadStringW
DestroyWindow
GetDC
ReleaseDC
LoadIconW
SendMessageW
GetMessageW
GetWindowRect
GetSystemMetrics
GetSystemMetrics
GetDC
SetTimer
GetMessageW
DefWindowProcW
ReleaseDC
LoadStringW
GetSystemMetrics
SetTimer
GetSystemMetrics
DestroyWindow
GetWindowRect
GetMessageW
GetWindowRect
CreateWindowExW
DefWindowProcW
GetSystemMetrics
LoadIconW
DestroyWindow
SendMessageW
SetTimer
PostMessageW
DestroyWindow
GetDlgItem
CreateWindowExW
GetWindowRect
SetTimer
GetDlgItem
kernel32
GetProcessHeap
VirtualAlloc
MultiByteToWideChar
WaitForSingleObject
VirtualAlloc
GetProcessHeap
SetUnhandledExceptionFilter
GetModuleFileNameA
GetCurrentProcessId
GetCommandLineA
ExitProcess
VirtualAlloc
FormatMessageW
QueryPerformanceCounter
GetCurrentProcess
lstrlenW
GetModuleHandleA
VirtualAlloc
GetCurrentProcessId
VirtualFree
GetModuleFileNameA
QueryPerformanceCounter
GetCommandLineW
FormatMessageW
GetModuleHandleA
QueryPerformanceCounter
GetCommandLineA
MultiByteToWideChar
MultiByteToWideChar
MultiByteToWideChar
GetCommandLineA
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameA
GetCurrentProcess
GetCurrentThreadId
GetACP
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
lstrlenW
SetEvent
lstrlenW
GetACP
GetTickCount
GetCurrentProcess
SetEvent
WaitForSingleObject
GetModuleHandleW
FormatMessageW
GetCommandLineA
GetModuleHandleW
GetModuleFileNameA
lstrcmpiW
LocalFree
GetACP
SetUnhandledExceptionFilter
GetACP
QueryPerformanceCounter
lstrlenW
LocalFree
QueryPerformanceCounter
GetProcessHeap
GetCurrentThreadId
LoadLibraryA
GetModuleHandleA
GetCommandLineW
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ