Static task
static1
Behavioral task
behavioral1
Sample
82e49521713842e2296364e318455929_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
82e49521713842e2296364e318455929_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
82e49521713842e2296364e318455929_JaffaCakes118
-
Size
101KB
-
MD5
82e49521713842e2296364e318455929
-
SHA1
8eea68dcc9d82856580a1dd9c8726f800af85585
-
SHA256
05a8480b6db9ecbfe7721c2e3f3b91ca1bb4f87283e3c8b6b872f5b551e3e7f2
-
SHA512
fb7ac8a00e162b55fe1b9d6daeddcd4f535211c5f2ac418c89c354bd5ccbf13f38aee62065f52b20f92708dc72cb5b29a19ef42a05cca16ea370d84ad364c59c
-
SSDEEP
1536:9EW7+rJHEiLakRKfBbf5UQnzlNonuo0KgDDe38YH3YWxY8BKvPVGp/kqf61OpE:aWquzjF5onOO803Y4nBKvPVGxkq6O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82e49521713842e2296364e318455929_JaffaCakes118
Files
-
82e49521713842e2296364e318455929_JaffaCakes118.exe windows:5 windows x86 arch:x86
537a1a1ffd182adebbca8801501f8034
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mixerClose
mixerGetLineInfoW
waveInStart
CloseDriver
waveInOpen
mixerGetLineControlsW
mixerSetControlDetails
waveInUnprepareHeader
mixerGetID
waveInClose
waveInStop
waveInPrepareHeader
mixerGetControlDetailsW
waveInGetDevCapsW
waveInAddBuffer
SendDriverMessage
waveInReset
OpenDriver
mixerOpen
advapi32
RegQueryValueExW
RegOpenKeyW
RegOpenKeyExW
RegSetValueExW
RegSetValueW
RegCloseKey
RegDeleteKeyW
RegEnumKeyW
RegCreateKeyW
RegEnumKeyExW
kernel32
CreateEventW
WideCharToMultiByte
GetCurrentThread
lstrcmpiW
FreeLibrary
lstrlenA
CloseHandle
GetModuleFileNameA
GetTickCount
GetSystemTimeAsFileTime
GetProfileIntA
MulDiv
InterlockedDecrement
GetCurrentProcessId
GetThreadPriority
lstrcpyW
GetProcessHeap
ReleaseSemaphore
SetEvent
SetEndOfFile
HeapAlloc
GlobalFree
GlobalLock
lstrcpyA
GetStartupInfoA
GlobalAlloc
MultiByteToWideChar
InitializeCriticalSection
VirtualFree
SetThreadPriority
DeleteCriticalSection
IsBadWritePtr
PostQueuedCompletionStatus
SetUnhandledExceptionFilter
GetSystemDefaultLangID
CreateIoCompletionPort
GetFileSize
lstrcpynW
lstrcmpW
CreateSemaphoreW
GetDiskFreeSpaceW
GetCurrentProcess
CreateFileW
lstrlenW
GetFileAttributesW
GetPrivateProfileStringW
CreateThread
SetFilePointer
LeaveCriticalSection
DeleteFileW
QueryPerformanceCounter
WaitForSingleObject
GetQueuedCompletionStatus
ReadFile
GetSystemInfo
ResetEvent
IsBadReadPtr
HeapFree
WriteFile
InterlockedIncrement
InterlockedExchange
IsBadCodePtr
GetLastError
LoadLibraryW
GlobalHandle
GlobalUnlock
GetVersionExW
GetFullPathNameW
WaitForMultipleObjects
EnterCriticalSection
GetEnvironmentStringsW
GlobalMemoryStatus
user32
GetDlgItem
MoveWindow
IsRectEmpty
ShowWindow
SendMessageW
DispatchMessageW
CheckRadioButton
SetDlgItemInt
CreateDialogParamW
ReleaseDC
GetClientRect
IsWindowVisible
DefWindowProcW
GetAsyncKeyState
GetDC
GetDesktopWindow
SetCursor
GetDlgItemInt
IsWindow
InvalidateRect
wsprintfW
LoadStringW
CheckDlgButton
ClientToScreen
SetDlgItemTextW
LoadCursorW
GetWindowLongW
TranslateMessage
PeekMessageW
SetWindowLongW
GetWindowRect
DestroyWindow
EnableWindow
ole32
CoFreeUnusedLibraries
CoTaskMemAlloc
CoInitialize
StringFromGUID2
CoUninitialize
CoTaskMemFree
CoCreateInstance
gdi32
GetObjectW
PatBlt
SelectObject
GetStockObject
GetPaletteEntries
GetTextExtentPoint32W
msvcrt
??3@YAXPAX@Z
??2@YAPAXI@Z
_ftol
wcslen
_except_handler3
_purecall
msvfw32
ICOpen
ICDecompress
ICCompress
ICLocate
ICSendMessage
ICGetInfo
ICClose
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ