Static task
static1
Behavioral task
behavioral1
Sample
439aa8a162317d093c5ca074f8de7ae9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
439aa8a162317d093c5ca074f8de7ae9_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
439aa8a162317d093c5ca074f8de7ae9_JaffaCakes118
-
Size
328KB
-
MD5
439aa8a162317d093c5ca074f8de7ae9
-
SHA1
5c587d0bb2f3655946b2de11b0f6ece6ac99f42b
-
SHA256
6e7cc499e08be83fb46a54507fe75f1e094116a79e49bba5e8fb00794f405ea6
-
SHA512
f2a0fa5fb3ba2f468de36b1331f702b39304ff2800d6642dba70e33a3281bea3ae6501cd6a94db94b3cabbbf725b7cbcc6b3874b7a3e48a35f86e8de84f53f44
-
SSDEEP
6144:qJIVyAznyUL1N/mbYgN9PveGnDVoblgsGjecUEHZUgYOSshJ0B4KD3Nas8E6ipMI:qJjzRPveGnNPz9DcMnl//hc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 439aa8a162317d093c5ca074f8de7ae9_JaffaCakes118
Files
-
439aa8a162317d093c5ca074f8de7ae9_JaffaCakes118.exe windows:1 windows x86 arch:x86
a4c5d12c31d586ef350e481dbe57cf94
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
LocalAlloc
GlobalLock
GlobalFree
GlobalSize
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
lstrcatA
GetUserDefaultLCID
IsDBCSLeadByte
CompareStringA
LocalReAlloc
MulDiv
LoadLibraryA
SearchPathA
GetFileAttributesA
GetTempFileNameA
GetWindowsDirectoryA
GetCurrentDirectoryA
lstrcmpiA
GetTempPathA
lstrcpynA
_llseek
GetPrivateProfileStringA
GetProfileStringA
Sleep
GetProfileIntA
WinExec
GetFileInformationByHandle
FindClose
FindFirstFileA
GetCurrentThreadId
GetTimeZoneInformation
GetModuleFileNameA
SetEndOfFile
SetFilePointer
CloseHandle
_lwrite
_lcreat
VirtualAlloc
FindNextFileA
GetSystemDirectoryA
LocalSize
VirtualFree
IsValidLocale
SetErrorMode
GetLastError
GetBinaryTypeA
GlobalUnlock
FreeLibrary
GetFileType
SetCurrentDirectoryA
_lread
GetTickCount
_lopen
_lclose
GetSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
SetFileAttributesA
MoveFileA
CopyFileA
DeleteFileA
CreateFileMappingA
MapViewOfFile
GetVersion
GlobalReAlloc
lstrlenA
lstrcpyA
GlobalAlloc
LocalFree
GetStdHandle
UnhandledExceptionFilter
WriteFile
SetConsoleCtrlHandler
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
RtlUnwind
user32
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
RegisterClassExA
LoadImageA
GetDlgCtrlID
LoadIconA
RegisterWindowMessageA
LoadAcceleratorsA
PostQuitMessage
IsRectEmpty
SystemParametersInfoA
EqualRect
GetDlgItemTextA
IsDlgButtonChecked
CreateMenu
InsertMenuA
DeleteMenu
DrawMenuBar
DestroyMenu
LoadMenuA
SetMenu
GetMenu
GetSubMenu
GetMenuItemCount
AppendMenuA
CreatePopupMenu
CheckMenuItem
TrackPopupMenu
LoadCursorA
SetCursor
SetRectEmpty
EnableMenuItem
EmptyClipboard
SetClipboardData
CloseClipboard
BeginPaint
EndPaint
GetKeyState
GetMessagePos
GetWindowTextLengthA
GetWindowTextA
VkKeyScanA
GetFocus
SetRect
GetSysColor
RegisterClassA
GetDesktopWindow
UnregisterClassA
EnumWindows
CreateDialogParamA
PeekMessageA
IsDialogMessageA
IsZoomed
CopyRect
EnableWindow
GetWindow
EnumThreadWindows
WinHelpA
GetClassNameA
GetSysColorBrush
CharLowerA
DialogBoxParamA
GetCursorPos
ClientToScreen
SetWindowPos
SetWindowTextA
FindWindowA
SetForegroundWindow
SetActiveWindow
IsWindow
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
InflateRect
ChildWindowFromPoint
SetCapture
KillTimer
ReleaseCapture
LoadBitmapA
InvertRect
wsprintfA
CharNextA
MessageBoxA
CharUpperA
SendDlgItemMessageA
GetWindowRect
ScreenToClient
GetDlgItem
SetDlgItemTextA
EndDialog
InvalidateRect
CreateWindowExA
DestroyWindow
DefWindowProcA
MoveWindow
ShowScrollBar
GetSystemMetrics
SetMessageQueue
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetClientRect
SetFocus
PtInRect
GetWindowLongA
SendMessageA
CallWindowProcA
IsWindowVisible
ShowWindow
SetTimer
GetParent
PostMessageA
SetWindowLongA
FillRect
FrameRect
LoadStringA
InvalidateRgn
GetDC
ReleaseDC
UpdateWindow
ValidateRect
EnumChildWindows
OffsetRect
GetAsyncKeyState
DrawFocusRect
IsClipboardFormatAvailable
CheckDlgButton
IsWindowEnabled
IsIconic
OpenClipboard
gdi32
DeleteObject
CombineRgn
SetRectRgn
GetStockObject
CreateRectRgn
GetTextExtentPoint32A
GetTextExtentPointA
SetTextColor
SetBkColor
SetBkMode
CreateSolidBrush
CreatePen
SaveDC
SetROP2
GetBkColor
GetTextColor
RestoreDC
TextOutA
GetTextAlign
SetTextAlign
CreateFontIndirectA
GetNearestColor
Rectangle
BitBlt
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA
CreateCompatibleDC
EndPage
StartDocA
EndDoc
Escape
StartPage
SetAbortProc
PatBlt
StretchBlt
GetTextMetricsA
CreateCompatibleBitmap
DeleteMetaFile
SetPixel
RealizePalette
SelectPalette
CreateDIBitmap
CreateBitmap
SetStretchBltMode
SetDIBits
PlayMetaFile
SetViewportExtEx
CreateDiscardableBitmap
SetViewportOrgEx
SelectObject
SetWindowExtEx
SetMapMode
InvertRgn
LPtoDP
CreatePalette
CreateICA
SetMetaFileBitsEx
IntersectClipRect
CreatePatternBrush
SetBrushOrgEx
UnrealizeObject
LineTo
MoveToEx
CreateFontA
ExtTextOutA
SetWindowOrgEx
GetSystemPaletteEntries
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
crtdll
_strnicmp
strncpy
atoi
atol
memmove
_isctype
_strcmpi
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
memset
strcmp
strchr
_stricmp
_fullpath
strstr
memcpy
strncmp
_exit
toupper
tolower
strtol
strtoul
remove
_global_unwind2
_local_unwind2
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
Sections
.text Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ