Static task
static1
Behavioral task
behavioral1
Sample
38ff5de3ea89ea5520e51456992266b7_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
38ff5de3ea89ea5520e51456992266b7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
38ff5de3ea89ea5520e51456992266b7_JaffaCakes118
-
Size
448KB
-
MD5
38ff5de3ea89ea5520e51456992266b7
-
SHA1
563a9a05c628f16ab2874c352dca5fbebeb48f4b
-
SHA256
665750448b7e59475f3ce33f5ff55c4c5757aa3240412c4acfd0053e77b1f40f
-
SHA512
d8d2ffe9bccc15e2cc023094d631da91a6ebb0aa6a0145340d0fd01deab7a58e21fb50d24fdb487b422f5952e632703018445518989ba9ff21f7345c093a005c
-
SSDEEP
12288:f/y8fGiUjYf0dv/lqPxh0l9IHM99W3Duue3K:tfGiUEf0N/cPxul9U89cDZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38ff5de3ea89ea5520e51456992266b7_JaffaCakes118
Files
-
38ff5de3ea89ea5520e51456992266b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
91859ebdadb575afad8ca72e9516ccac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
SysAllocString
SysStringLen
kernel32
GetExitCodeProcess
SetLastError
FindNextFileA
DeleteFileA
Sleep
QueryPerformanceCounter
GetCommandLineW
FlushFileBuffers
SetFileAttributesA
FileTimeToSystemTime
GlobalUnlock
SetEnvironmentVariableA
IsDebuggerPresent
WriteFile
InterlockedDecrement
GetStringTypeW
GetCommandLineA
LocalFree
LocalAlloc
UnmapViewOfFile
UnhandledExceptionFilter
GetConsoleMode
GetStartupInfoA
CloseHandle
FindClose
WriteConsoleA
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
InitializeCriticalSection
ReleaseMutex
CreateProcessA
GlobalLock
VirtualFree
MapViewOfFile
SetEndOfFile
FreeEnvironmentStringsW
RaiseException
HeapFree
LockResource
GlobalAlloc
InterlockedIncrement
GetVersionExA
GetSystemInfo
GetOEMCP
DuplicateHandle
ReadFile
MultiByteToWideChar
lstrcmpA
GetDriveTypeA
TerminateProcess
GetWindowsDirectoryA
SetErrorMode
SetUnhandledExceptionFilter
LeaveCriticalSection
GetStringTypeA
GetProcAddress
LoadLibraryExA
TlsFree
FormatMessageA
EnterCriticalSection
LoadLibraryExW
GetLastError
HeapCreate
GetFileAttributesW
GetEnvironmentStringsW
CreateFileA
GetCurrentProcess
InterlockedExchange
FindResourceW
GetModuleHandleA
TlsAlloc
WaitForSingleObject
ExpandEnvironmentStringsA
GetStdHandle
GetFileSize
CreateFileW
FindNextFileW
GetCurrentThread
HeapReAlloc
VirtualQuery
TlsGetValue
GetFileAttributesA
GetFullPathNameA
GetModuleFileNameA
CreateThread
GetEnvironmentVariableA
HeapAlloc
HeapSize
WaitForMultipleObjects
GetModuleFileNameW
GetCurrentThreadId
LoadLibraryA
GetFileType
FindFirstFileA
lstrcpynA
lstrlenW
GetTimeZoneInformation
InterlockedCompareExchange
GetConsoleOutputCP
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryW
IsValidCodePage
GetConsoleCP
GetCurrentDirectoryA
GetVersion
CreateEventA
HeapDestroy
GetProcessHeap
GetLocaleInfoA
lstrcmpiW
SetEvent
FindFirstFileW
GetLocalTime
SetStdHandle
CreateEventW
TlsSetValue
GetCurrentProcessId
GlobalFree
LoadResource
FindResourceA
GetModuleHandleW
GetSystemDirectoryA
WideCharToMultiByte
GetTickCount
SetHandleCount
LCMapStringA
LCMapStringW
FormatMessageW
lstrlenA
GetACP
lstrcmpiA
DeleteCriticalSection
CompareStringA
MulDiv
SetFilePointer
GetThreadLocale
ExitProcess
ResetEvent
SizeofResource
GetCPInfo
user32
MoveWindow
EnableMenuItem
GetWindowRect
GetMessageA
DefWindowProcA
SetWindowTextA
EnableWindow
SetWindowLongA
SetWindowPos
PostQuitMessage
PostMessageA
BeginPaint
InvalidateRect
ShowWindow
SystemParametersInfoA
SetCursor
LoadCursorA
GetCursorPos
SetDlgItemTextA
TranslateMessage
GetDC
LoadIconA
IsWindow
DestroyWindow
IsIconic
ScreenToClient
GetClientRect
GetWindowLongA
DispatchMessageA
IsWindowVisible
UpdateWindow
GetParent
SetForegroundWindow
GetDlgItem
LoadStringA
CreateWindowExA
TrackPopupMenu
SetCapture
SetFocus
ReleaseDC
MessageBoxA
GetSubMenu
GetSysColor
GetSystemMetrics
RegisterClassA
CallWindowProcA
SendMessageA
EndDialog
PeekMessageA
GetKeyState
gdi32
SetBkColor
DeleteObject
SelectObject
DeleteDC
GetDeviceCaps
ole32
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoInitialize
Sections
cqmiiw Size: 444KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE