Static task
static1
Behavioral task
behavioral1
Sample
37e3c79f1bcb7fa94cf7c8f20582b906_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
37e3c79f1bcb7fa94cf7c8f20582b906_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37e3c79f1bcb7fa94cf7c8f20582b906_JaffaCakes118
-
Size
199KB
-
MD5
37e3c79f1bcb7fa94cf7c8f20582b906
-
SHA1
49e299ee6e71bda901125225db1c4eade460465f
-
SHA256
e3c9da359dad57b393256ceab609d6d82336805d72fe5acdd3e1adfaf69d9e79
-
SHA512
36ddcf2a51ec28614084d9e8568e49debd2cc0e6718eb9b227ca422484e25abf8d1bf945c08c88fa7484f41cad76ad31650996e76379c40c2f6d71c255d02e6a
-
SSDEEP
6144:U+oB1UHzB6eAjvqwkT1RSL3IWskqUbv3M4Oj/n:U9ytqzqwGRSL3IPx4OjP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37e3c79f1bcb7fa94cf7c8f20582b906_JaffaCakes118
Files
-
37e3c79f1bcb7fa94cf7c8f20582b906_JaffaCakes118.exe windows:4 windows x86 arch:x86
468444aaf4a32020be796e15f1eb8729
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoFreeUnusedLibraries
shell32
SHGetFileInfoA
SHGetSpecialFolderLocation
DragQueryFileA
Shell_NotifyIconA
SHGetDesktopFolder
user32
GetClassInfoA
FillRect
EndPaint
EnumChildWindows
DrawMenuBar
GetFocus
GetDCEx
DrawIconEx
EmptyClipboard
GetDesktopWindow
FrameRect
GetCursorPos
EnumThreadWindows
GetCursor
GetClassNameA
EnableWindow
EnableScrollBar
GetDC
EnableMenuItem
FindWindowA
GetCapture
EqualRect
GetClientRect
GetForegroundWindow
DrawTextA
EnumWindows
GetClassLongA
GetClipboardData
GetActiveWindow
GetDlgItem
msvcrt
mbstowcs
fabs
wcscspn
rand
exp
time
tolower
log
exit
advapi32
RegEnumKeyExA
oleaut32
SafeArrayGetUBound
SysAllocStringLen
SafeArrayUnaccessData
VariantCopyInd
SysStringLen
GetErrorInfo
RegisterTypeLib
SafeArrayGetElement
OleLoadPicture
gdi32
GetObjectA
GetRgnBox
GetCurrentPositionEx
CreateFontIndirectA
GetDIBits
GetClipBox
CreateCompatibleBitmap
GetBitmapBits
SelectPalette
CreateCompatibleDC
GetDIBColorTable
CreatePenIndirect
GetPixel
SaveDC
SelectObject
SetTextColor
GetDCOrgEx
RestoreDC
GetPaletteEntries
BitBlt
CreateBrushIndirect
CreatePalette
CreateDIBSection
SetBkColor
CreateBitmap
SetPixel
CreateDIBitmap
SetBkMode
LineTo
CopyEnhMetaFileA
kernel32
GetStartupInfoA
VirtualAllocEx
ExitThread
LoadLibraryA
GlobalFindAtomA
InitializeCriticalSection
RaiseException
HeapAlloc
lstrlenA
GetVersionExA
GlobalAddAtomA
LoadResource
LocalAlloc
GetUserDefaultLCID
LoadLibraryExA
VirtualAlloc
GetThreadLocale
GetStdHandle
LockResource
GetSystemDefaultLangID
GlobalDeleteAtom
GetVersion
GetTickCount
GetModuleFileNameA
GetStringTypeW
ExitProcess
IsBadReadPtr
GetStringTypeA
GlobalAlloc
GetLocaleInfoA
GetProcAddress
HeapFree
GetOEMCP
GetProcessHeap
GetModuleHandleA
GetLocalTime
shlwapi
PathIsContentTypeA
SHDeleteKeyA
SHGetValueA
PathIsDirectoryA
SHQueryInfoKeyA
SHQueryValueExA
comctl32
ImageList_Remove
ImageList_Write
ImageList_Draw
ImageList_DragShowNolock
ImageList_Destroy
ImageList_GetBkColor
ImageList_Create
ImageList_Add
version
VerInstallFileA
VerQueryValueA
GetFileVersionInfoSizeA
Sections
.text Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 545B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc1 Size: 512B - Virtual size: 303B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc6 Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc2 Size: 121KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc8 Size: 512B - Virtual size: 483B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc5 Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ