Static task
static1
Behavioral task
behavioral1
Sample
387da03e097955924320cc72bc02b74f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
387da03e097955924320cc72bc02b74f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
387da03e097955924320cc72bc02b74f_JaffaCakes118
-
Size
196KB
-
MD5
387da03e097955924320cc72bc02b74f
-
SHA1
5e3d45653c5e76f3855652b05d192d6de8157664
-
SHA256
d24e9ac2a00e9f56569a07b85590e53e813c369b4550aef07a1caa0744c221eb
-
SHA512
a980b2c2968f59ebe48954854d5ba93d4e4c20cf6e4d001a44bbb9831cf80a1c2d7e83d9a9d4d4cc93f90533288b540f885e0d7bb13a1bb22b53c453ae9ed4f9
-
SSDEEP
6144:5C0b1VUow+SNj85hV3DH8SRhn5801rkdw2:7b1RSNj8fV3DFq01I/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 387da03e097955924320cc72bc02b74f_JaffaCakes118
Files
-
387da03e097955924320cc72bc02b74f_JaffaCakes118.exe windows:5 windows x86 arch:x86
33173f094c67cac9a2eda9528d8ad256
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
MultiByteToWideChar
GetVolumeInformationA
GetFullPathNameA
CreateFileA
CompareStringA
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameA
lstrcmpA
WaitForSingleObject
GetFileAttributesA
GetFileSizeEx
GetFileTime
GlobalAddAtomA
GlobalFlags
GetCurrentThreadId
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
GetLocalTime
GetTimeZoneInformation
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
VirtualAlloc
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
Sleep
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
HeapCreate
VirtualFree
GetStdHandle
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
lstrlenA
GetCompressedFileSizeA
DeleteFileA
GetComputerNameA
MoveFileA
CloseHandle
CreateMutexA
GetLastError
SetLastError
GetModuleHandleA
GetModuleFileNameA
FormatMessageA
LocalFree
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FindFirstFileA
FreeLibrary
user32
PostMessageA
GetClientRect
SetForegroundWindow
SetMenu
MapWindowPoints
GetMessagePos
GetMessageTime
DestroyWindow
GetTopWindow
GetForegroundWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
LoadIconA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringA
DrawTextExA
GetClassInfoExA
TabbedTextOutA
SetWindowPos
SetWindowLongA
IsWindow
GetDlgItem
PeekMessageA
ValidateRect
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
SetWindowTextA
GetWindowTextA
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
CharUpperA
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetAsyncKeyState
GetKeyState
GetKeyboardLayoutNameA
SetWindowsHookExA
SendMessageA
GetClassNameA
EnumChildWindows
GetParent
PostQuitMessage
DefWindowProcA
RegisterClassExA
CallNextHookEx
UnhookWindowsHookEx
TranslateMessage
DispatchMessageA
GetMessageA
SetTimer
CreateWindowExA
RegisterWindowMessageA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
CallWindowProcA
GetMenu
DrawTextA
GetFocus
advapi32
RegCloseKey
RegOpenKeyExA
RegRestoreKeyA
RegUnLoadKeyA
RegLoadKeyA
RegSaveKeyA
RegEnumKeyExA
RegEnumValueA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegQueryValueExA
shlwapi
PathFindFileNameA
PathIsUNCA
PathStripToRootA
wininet
HttpOpenRequestA
InternetConnectA
HttpSendRequestExA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
HttpAddRequestHeadersA
InternetCloseHandle
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
DeleteObject
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
GetStockObject
CreateBitmap
DeleteDC
PtVisible
RectVisible
TextOutA
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
GetDeviceCaps
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
comdlg32
GetFileTitleA
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ