Static task
static1
Behavioral task
behavioral1
Sample
5682313d640b777abdf111bb830005a8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5682313d640b777abdf111bb830005a8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5682313d640b777abdf111bb830005a8_JaffaCakes118
-
Size
113KB
-
MD5
5682313d640b777abdf111bb830005a8
-
SHA1
284e8cb0cdcc59d3f2d00be47909f1d7b215b84e
-
SHA256
84cc2e3fbe2e5c43e4e21cbe624db78dc30fb83ad6793659e2769bf2c54f6aae
-
SHA512
ec1e8cf7c6bff32bc1051ae6c1b8dfa13d2d8aba531cd4b0d18f97435e45909ab02c1b07be626662138232bb5a4c3dfa088cd1d8b52c0eb3a5e5691f7bf26cc6
-
SSDEEP
3072:lOAZ87KY9DQnFOFUmJHdllIxKzutUgFThanTGWuCfdYJuOYhoE:sMYafm8xKzuljanTGvoOYht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5682313d640b777abdf111bb830005a8_JaffaCakes118
Files
-
5682313d640b777abdf111bb830005a8_JaffaCakes118.exe windows:4 windows x86 arch:x86
05b74a8921a26799ed07a0a229a727de
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FormatMessageW
GetDriveTypeA
GetStartupInfoA
GetConsoleCP
LCMapStringA
FindResourceW
GetDateFormatA
GlobalSize
FindClose
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
HeapSize
LCMapStringW
VirtualProtect
VirtualQuery
InterlockedExchange
RtlUnwind
IsBadWritePtr
HeapReAlloc
MulDiv
GetCPInfo
GetOEMCP
GetStringTypeW
GetStringTypeA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
WriteFile
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersionExA
GetCommandLineA
Sleep
InitializeCriticalSection
CloseHandle
CreateMutexW
VirtualAlloc
LoadLibraryA
GetLocaleInfoA
MultiByteToWideChar
GetModuleHandleA
GetModuleHandleW
SetStdHandle
FreeEnvironmentStringsA
lstrcpynW
IsValidLocale
CreateProcessW
ExpandEnvironmentStringsW
GetTempPathW
SizeofResource
UnhandledExceptionFilter
SetEvent
GetLocalTime
QueryPerformanceCounter
SetCurrentDirectoryW
LoadLibraryW
GetSystemInfo
GetSystemTimeAsFileTime
GetFullPathNameW
GetACP
FreeLibrary
GetDriveTypeW
GetEnvironmentStrings
GetModuleFileNameW
GetLastError
CompareStringA
GetLongPathNameW
MoveFileW
WriteConsoleW
GetTimeZoneInformation
HeapAlloc
GetFileAttributesW
user32
IsClipboardFormatAvailable
GetDlgCtrlID
SetDlgItemTextW
EmptyClipboard
IsDialogMessageA
GetWindowLongW
DestroyAcceleratorTable
SetMenuItemInfoW
SetCursor
IsChild
ScreenToClient
FillRect
CallWindowProcA
SetWindowTextW
SetMenu
SetForegroundWindow
RegisterWindowMessageW
DispatchMessageW
GetCursorPos
SetDlgItemInt
DrawFocusRect
FrameRect
ClientToScreen
IsWindowVisible
SystemParametersInfoW
ShowWindow
SetCapture
BeginDeferWindowPos
PostQuitMessage
DeleteMenu
DestroyCursor
GetDlgItemTextW
GetFocus
TranslateAcceleratorW
IsIconic
DrawEdge
CreateAcceleratorTableW
IsWindowUnicode
DestroyWindow
LoadMenuW
IsDialogMessageW
CreatePopupMenu
GetSubMenu
SetClipboardData
GetKeyState
ReleaseCapture
CreateCursor
SetScrollPos
RegisterClassExW
DrawFrameControl
EnableMenuItem
DeferWindowPos
ToAscii
GetWindowRect
GetDlgItemInt
SetWindowPlacement
OpenClipboard
InvalidateRect
wsprintfW
HideCaret
CallNextHookEx
LoadCursorW
ReleaseDC
GetScrollPos
GetMenuItemID
LoadImageW
CharUpperW
LoadIconW
DialogBoxIndirectParamW
SetCaretPos
MessageBoxW
gdi32
DeleteDC
SetBkColor
GetTextExtentPointW
CreatePatternBrush
SetROP2
RemoveFontResourceW
StartPage
EndDoc
RestoreDC
DeleteObject
Rectangle
EndPage
EnumFontFamiliesExW
GetDeviceCaps
CreateSolidBrush
CreatePen
CreateHatchBrush
SaveDC
SetTextAlign
OffsetWindowOrgEx
SetTextColor
GetStockObject
CreateCompatibleBitmap
CreateBitmap
GetTextExtentPoint32W
ExtTextOutW
StartDocW
SetBkMode
GetPixel
CreateFontW
GetTextMetricsW
GetObjectW
GetROP2
SetBrushOrgEx
BitBlt
CreateFontIndirectW
AddFontResourceW
DPtoLP
comdlg32
ChooseFontW
GetFileTitleA
PageSetupDlgA
GetOpenFileNameW
ChooseColorA
FindTextA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorW
PrintDlgA
ReplaceTextA
ReplaceTextW
ChooseFontA
GetFileTitleW
PrintDlgW
GetSaveFileNameW
PageSetupDlgW
FindTextW
ole32
WriteClassStm
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 73KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ