Static task
static1
Behavioral task
behavioral1
Sample
3e2fefa729325f824b98761018e0a786_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e2fefa729325f824b98761018e0a786_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3e2fefa729325f824b98761018e0a786_JaffaCakes118
-
Size
168KB
-
MD5
3e2fefa729325f824b98761018e0a786
-
SHA1
bdefcc32200e14f633375f8df7d01de7040bd675
-
SHA256
1ac46ebe2eb4969d1a615805536f0bf9e59c77130f3a515fa97012b348d8c129
-
SHA512
0dfebb39665f359fc66b5932ddb92228b0985745ac602210aaa1b50dfb8240d81fd336c0e13a796504d8f6eeb233c103039847278abfdc76d386dce944e391cc
-
SSDEEP
3072:xI3R9XgiQbnA0YvCl01qYIZoUXXCN6SdPv:xyYTA0uKCNn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e2fefa729325f824b98761018e0a786_JaffaCakes118
Files
-
3e2fefa729325f824b98761018e0a786_JaffaCakes118.exe windows:4 windows x86 arch:x86
69cb10dd9b60a268d0fb1a1902eed96d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessVersion
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileSize
WritePrivateProfileStringA
SizeofResource
SetErrorMode
RtlUnwind
HeapFree
GetFileTime
ExitProcess
GetStartupInfoA
HeapAlloc
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
GetCommandLineA
TerminateProcess
IsBadWritePtr
UnhandledExceptionFilter
GlobalFlags
GlobalGetAtomNameA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
lstrlenA
InterlockedDecrement
InterlockedIncrement
CreateDirectoryA
CopyFileA
Sleep
DeleteFileA
GetModuleFileNameA
GetCurrentDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetProfileStringA
TlsSetValue
TlsGetValue
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
EnterCriticalSection
TlsAlloc
LocalAlloc
InitializeCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FileTimeToLocalFileTime
LocalFree
FileTimeToSystemTime
GetVolumeInformationA
GetFullPathNameA
FindFirstFileA
FindClose
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
lstrcpynA
DuplicateHandle
GetLastError
LoadLibraryA
MulDiv
SetLastError
lstrcatA
FreeLibrary
GetVersion
FreeEnvironmentStringsA
GlobalAddAtomA
GetTempPathA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
CloseHandle
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
VirtualAlloc
user32
ScreenToClient
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
LoadStringA
DestroyMenu
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
InvalidateRect
GetTopWindow
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
CopyRect
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowRect
EndDialog
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
PostMessageA
EnableWindow
GetDesktopWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
GetMenuItemCount
GetSubMenu
GetWindowPlacement
GetForegroundWindow
ExcludeUpdateRgn
ShowCaret
DefDlgProcA
IsWindowUnicode
CharNextA
InflateRect
UnregisterClassA
DrawFocusRect
HideCaret
gdi32
GetClipBox
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
CreateDIBitmap
BitBlt
GetTextExtentPointA
CreateCompatibleDC
CreateBitmap
SetTextColor
PatBlt
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
shell32
ShellExecuteA
comctl32
ord17
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ