Static task
static1
Behavioral task
behavioral1
Sample
3d7e7d2f66a7b9fcae3af903e4da8934_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3d7e7d2f66a7b9fcae3af903e4da8934_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3d7e7d2f66a7b9fcae3af903e4da8934_JaffaCakes118
-
Size
115KB
-
MD5
3d7e7d2f66a7b9fcae3af903e4da8934
-
SHA1
00a167bdf53113553f6e81a24755282bf6a4a0e1
-
SHA256
be38ea18f3d78dbddd8611dfb593af40962d81fc84e977eadd2b89e9fa13219f
-
SHA512
16797be44da57c41d6f82455c1ff422061f53bc2e649006e9af55e94a4948a8f44de599d1f607d2ad73bbdda81684a0d030d1e817851f88ae4a2784dceb6ee14
-
SSDEEP
1536:6Cc5ug+iAbUZXcaa0+ZX6u4frgBj1wMSXRPBRg8aTrwFCHf1eeNfh:6h5ZNa0gKu4frgBCXvRgrA81eeN5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d7e7d2f66a7b9fcae3af903e4da8934_JaffaCakes118
Files
-
3d7e7d2f66a7b9fcae3af903e4da8934_JaffaCakes118.exe windows:4 windows x86 arch:x86
7da4e273889abe9595978f4a832544e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ReleaseDC
ChildWindowFromPoint
SetParent
GetClientRect
BeginPaint
GetKeyboardLayoutNameA
GetScrollPos
GetWindowLongW
GetIconInfo
GetKeyNameTextA
GetDC
PostQuitMessage
TranslateMDISysAccel
InflateRect
UnhookWindowsHookEx
TrackPopupMenu
MapWindowPoints
TranslateMessage
GetClassInfoA
GetWindowTextA
GetFocus
PeekMessageW
EnumThreadWindows
SetWindowTextA
CheckMenuItem
RemoveMenu
SetScrollRange
SystemParametersInfoA
InvalidateRect
DispatchMessageW
UpdateWindow
DispatchMessageA
WaitMessage
GetCursorPos
ShowWindow
IsWindowVisible
IsIconic
DrawFrameControl
GetKeyboardType
SendMessageA
PtInRect
AdjustWindowRectEx
GetKeyboardLayoutList
SetCursor
ShowOwnedPopups
GetMenu
CharNextW
IsZoomed
GetKeyboardLayout
DefWindowProcA
RegisterClipboardFormatA
OemToCharA
GetWindowPlacement
GetWindowThreadProcessId
ScreenToClient
CharLowerBuffA
InsertMenuItemA
RemovePropA
IsChild
EnableScrollBar
CreatePopupMenu
MoveWindow
ReleaseCapture
LoadStringA
ClientToScreen
GetWindowLongA
SetCapture
CallNextHookEx
CharToOemA
GetWindowRect
FindWindowA
CallWindowProcA
GetClassNameA
DrawAnimatedRects
CharUpperBuffA
FrameRect
SetScrollInfo
UnregisterClassA
SetForegroundWindow
EnumWindows
GetScrollInfo
SetWindowPos
SendMessageW
RegisterClassA
SetWindowLongW
OffsetRect
DefFrameProcA
EqualRect
CreateMenu
DestroyMenu
IsDialogMessageA
ShowScrollBar
SetFocus
IsWindowEnabled
GetClassLongA
LoadCursorA
DrawIcon
GetPropA
GetSysColorBrush
GetCapture
EnumChildWindows
SetMenu
CloseClipboard
GetSubMenu
PeekMessageA
GetActiveWindow
MessageBeep
GetSystemMetrics
InsertMenuA
GetMessagePos
RedrawWindow
GetKeyState
SetRect
DrawMenuBar
MessageBoxA
IntersectRect
LoadBitmapA
SetMenuItemInfoA
MapVirtualKeyA
GetMenuItemCount
GetClipboardData
EnableMenuItem
FillRect
DeleteMenu
SetActiveWindow
EndPaint
GetWindow
GetMenuState
ScrollWindow
SetClipboardData
GetWindowDC
PostMessageA
IsWindow
CreateIcon
DestroyCursor
GetDCEx
GetSysColor
GetScrollRange
wsprintfA
SetPropA
IsDialogMessageW
DefMDIChildProcA
IsWindowUnicode
GetDlgItem
DrawEdge
KillTimer
RegisterWindowMessageA
GetParent
IsRectEmpty
EnableWindow
GetMenuItemInfoA
SetTimer
GetSystemMenu
CharNextA
OpenClipboard
GetLastActivePopup
SetWindowLongA
GetCursor
DrawTextA
DrawIconEx
GetMenuItemID
SetScrollPos
GetTopWindow
GetDesktopWindow
GetMenuStringA
DestroyIcon
GetKeyboardState
DestroyWindow
CharLowerA
SetClassLongA
MsgWaitForMultipleObjects
kernel32
GetSystemDefaultLangID
GetOEMCP
HeapFree
VirtualQuery
VirtualAlloc
GetACP
FindFirstFileA
GetLocalTime
VirtualAllocEx
SetEndOfFile
CreateFileA
CreateThread
FormatMessageA
ReadFile
FreeLibrary
LocalFree
LoadResource
ExitProcess
GetDateFormatA
LoadLibraryA
GetThreadLocale
GetFileAttributesA
GlobalAddAtomA
lstrlenA
MoveFileExA
GetLastError
GetLocaleInfoA
ExitThread
FindClose
GetTickCount
MoveFileA
GetEnvironmentStrings
GetModuleFileNameA
GetStringTypeW
CloseHandle
lstrcmpiA
GetFileSize
GlobalAlloc
GetProcAddress
GlobalFindAtomA
MulDiv
EnumCalendarInfoA
SetThreadLocale
WaitForSingleObject
EnterCriticalSection
GetCurrentThread
GlobalDeleteAtom
CreateEventA
SetErrorMode
SetFilePointer
SetHandleCount
GetVersion
DeleteFileA
SetEvent
SetLastError
LocalReAlloc
lstrcmpA
GetCPInfo
FreeResource
lstrcpynA
GetProcessHeap
RaiseException
GetCurrentProcess
GetStdHandle
GetFileType
CompareStringA
GetStringTypeA
Sleep
DeleteCriticalSection
lstrcpyA
LoadLibraryExA
FindResourceA
GetStartupInfoA
VirtualFree
InitializeCriticalSection
GetCurrentThreadId
SizeofResource
WriteFile
ResetEvent
GetCommandLineA
LocalAlloc
HeapAlloc
GetModuleHandleA
GetFullPathNameA
LockResource
msvcrt
memcpy
cos
Sections
CODE Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 385B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE