Static task
static1
Behavioral task
behavioral1
Sample
38e546c15a811649cde70657d86adf28_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
38e546c15a811649cde70657d86adf28_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38e546c15a811649cde70657d86adf28_JaffaCakes118
-
Size
178KB
-
MD5
38e546c15a811649cde70657d86adf28
-
SHA1
e325662407f6d578b3e12fa79b343ac0f95d6faa
-
SHA256
a3ac7bbf2090c00db91ef97067661c44496695fd4cc1e78b146132c021a91dc3
-
SHA512
021383d93ee7d1c272ecaed3ce89f4ebaa9e74dec7b9ecc9a1285d5ed158146fd7e6673fd2479f0c8df8a80709c12f59f6f81bd05aeb77210f52c31926c3145a
-
SSDEEP
3072:rbL52Q8m8TUw+CXtUZ/h1ZvkbjSkTD9n9iEPIOL9ahF5Tt+tK24NEZFP3XJ8:3L8TUw+Cm5xvwSSnPPIOL9yTa14IS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38e546c15a811649cde70657d86adf28_JaffaCakes118
Files
-
38e546c15a811649cde70657d86adf28_JaffaCakes118.exe windows:4 windows x86 arch:x86
935d55e0aff92f381a36fd53b0111715
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
EnterCriticalSection
LoadLibraryW
lstrcmpiW
GetModuleFileNameW
CloseHandle
GetLastError
GetCurrentThreadId
GetModuleFileNameW
HeapDestroy
InterlockedIncrement
VirtualProtect
GetModuleFileNameW
VirtualProtect
EnterCriticalSection
DisableThreadLibraryCalls
GetLastError
GetCurrentProcess
VirtualProtect
EnterCriticalSection
LeaveCriticalSection
CloseHandle
FreeLibrary
InterlockedDecrement
Sleep
VirtualProtect
GetCurrentThreadId
GetCurrentThreadId
DeleteCriticalSection
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentThreadId
DeleteCriticalSection
CreateFileW
DisableThreadLibraryCalls
lstrlenA
InterlockedDecrement
GetCurrentProcessId
CreateThread
GetCurrentThreadId
LeaveCriticalSection
GetProcAddress
LoadLibraryA
EnterCriticalSection
InterlockedIncrement
CreateEventW
LocalAlloc
ReadFile
ReadFile
LocalAlloc
GetModuleHandleW
VirtualAlloc
GetModuleFileNameA
LeaveCriticalSection
GetLastError
SetLastError
GetVersionExA
HeapAlloc
HeapFree
user32
SendMessageW
SendDlgItemMessageW
GetClientRect
GetSystemMetrics
SetWindowLongW
SetWindowTextW
PostQuitMessage
PostQuitMessage
GetWindowRect
SetFocus
SendDlgItemMessageW
BeginPaint
InvalidateRect
SetCursor
BeginPaint
EndDialog
EndDialog
CreateWindowExW
wsprintfA
SetWindowPos
SetWindowPos
CharNextW
BeginPaint
LoadCursorW
DefWindowProcW
GetClientRect
GetWindowLongW
ShowWindow
SetFocus
EndPaint
InvalidateRect
GetDlgItem
EndPaint
PostMessageW
LoadStringW
SetWindowPos
SendMessageW
LoadCursorW
EnableWindow
TranslateMessage
ReleaseDC
ShowWindow
SendMessageW
SetCursor
GetSystemMetrics
SetCursor
SendMessageW
GetDlgItem
SendDlgItemMessageW
SetForegroundWindow
GetWindowLongW
EndDialog
wsprintfA
GetWindowLongW
PeekMessageW
GetSysColor
KillTimer
GetSysColor
SetForegroundWindow
CreateWindowExW
GetDlgItem
GetFocus
gdi32
LineTo
CreateDIBitmap
SelectObject
SetBkColor
CreateDIBitmap
BitBlt
GetBkColor
LineTo
SetBkMode
GetWindowExtEx
SetBkColor
Ellipse
GetWindowExtEx
GetPixel
SelectObject
CreateDIBitmap
CreatePen
LineTo
SetPixel
StretchBlt
RoundRect
RoundRect
SetBrushOrgEx
Rectangle
GetBkMode
CombineRgn
CreateBitmapIndirect
CreateBitmapIndirect
CreateDIBSection
SetWindowOrgEx
SetBrushOrgEx
Polygon
SetTextColor
GetBkMode
SetTextColor
GetPixel
GetBkMode
GetBkMode
Polygon
Ellipse
BitBlt
GetBrushOrgEx
GetPixel
LineTo
SetBrushOrgEx
CreateBitmap
CreateDIBitmap
SetBkMode
MoveToEx
SetWindowOrgEx
LineTo
SetWindowOrgEx
GetBkColor
SetWindowOrgEx
SetTextColor
BitBlt
PatBlt
GetPixel
CreateBitmapIndirect
GetBkMode
GetBrushOrgEx
CreateRectRgn
SetWindowExtEx
SetTextColor
Sections
.text Size: 168KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ