Static task
static1
Behavioral task
behavioral1
Sample
574ca330ca83fb483ca1dcd00a309318_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
574ca330ca83fb483ca1dcd00a309318_JaffaCakes118
-
Size
6.4MB
-
MD5
574ca330ca83fb483ca1dcd00a309318
-
SHA1
dacac3359ec78cdfa5bc5d1e05c1ae06ab687fd2
-
SHA256
afa51fa01a626fb17b2ce8a870f41639a1b9fe8c1f12536d6fe91c55691986c8
-
SHA512
fdcc9548013200db20fe94509870f5270d698351df4951202f442de4ae26a01ddfa7919c864dd1cd70807479f7988abfece376695ae56a322e466cd3e005abe6
-
SSDEEP
49152:fM1+Ftbh4444aaaaNkWq3UtCKlVtBwQhw4Rnd5CRn5sTcnyIWBduakWsY12ErWgq:U1At4WqGC0Ha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 574ca330ca83fb483ca1dcd00a309318_JaffaCakes118
Files
-
574ca330ca83fb483ca1dcd00a309318_JaffaCakes118.exe windows:4 windows x86 arch:x86
e2bc23cb2f7e1a4854c7d7de162b9edc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpA
MulDiv
GetModuleFileNameA
GlobalUnlock
GlobalLock
GlobalAlloc
GetCurrentThreadId
SetLastError
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
WaitForSingleObject
GetModuleFileNameW
CreateThread
MoveFileExA
GetTempPathW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCurrentProcess
GetConsoleMode
GetConsoleCP
SetFilePointer
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
GetStartupInfoA
GetCommandLineA
HeapReAlloc
VirtualQuery
FlushInstructionCache
IsDBCSLeadByte
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetLastError
lstrlenW
WideCharToMultiByte
LoadLibraryExA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
GetSystemInfo
VirtualProtect
CreateFileA
WriteFile
CloseHandle
GetTickCount
Sleep
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
user32
SetWindowLongA
GetWindowLongA
CreateWindowExA
SendMessageA
DispatchMessageA
TranslateMessage
PeekMessageA
MessageBoxA
CallWindowProcA
ReleaseDC
GetDC
GetDesktopWindow
wsprintfA
CharNextA
DefWindowProcA
GetSysColor
MoveWindow
SetWindowPos
GetClientRect
ClientToScreen
ScreenToClient
InvalidateRect
InvalidateRgn
RedrawWindow
SetCapture
IsChild
GetParent
GetDlgItem
UnregisterClassA
LoadIconA
ShowWindow
SetForegroundWindow
DestroyIcon
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateAcceleratorTableA
RegisterClassExA
LoadCursorA
GetClassInfoExA
IsWindow
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
BeginPaint
EndPaint
DestroyWindow
FillRect
ReleaseCapture
GetClassNameA
advapi32
RegQueryInfoKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegEnumKeyExA
OpenSCManagerW
CloseServiceHandle
OpenServiceW
StartServiceW
ControlService
RegDeleteKeyA
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoInitialize
oleaut32
SysAllocString
SysStringLen
SysFreeString
SysAllocStringLen
VarUI4FromStr
SysStringByteLen
VariantInit
VariantClear
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
gdi32
GetStockObject
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetDeviceCaps
ntdll
_stricmp
ZwEnumerateKey
RtlUnwind
NtCreateFile
ZwOpenKey
ZwQueryValueKey
NtWriteFile
NtReadFile
NtQueryInformationFile
NtSetInformationFile
NtQuerySystemInformation
RtlFreeHeap
RtlAllocateHeap
NtClose
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ