Static task
static1
Behavioral task
behavioral1
Sample
83a2c9543bde47a5d607730120b87bf0_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
83a2c9543bde47a5d607730120b87bf0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
83a2c9543bde47a5d607730120b87bf0_JaffaCakes118
-
Size
326KB
-
MD5
83a2c9543bde47a5d607730120b87bf0
-
SHA1
9ecaee624799beb76a90a5966dba3b951e3bde6d
-
SHA256
7a6423f9aa6421bf9e8ce1bbe303254d4961d233c86c9d43f75dd906134d50da
-
SHA512
f0eb2f542a9ff86ab75709e24637cf54f351d3dd804a67db0fa8de453cc326f3cb8cf71696c907f54ccd272eb931bcb2e5c5410d799f0d48e4d80ac80a2b5f16
-
SSDEEP
6144:Ku5Tnqhbkq3afH9AOASCY1YIOzEaXHIQi0yth5MmV:KuZnqJk0afdmw1YIDNQsr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83a2c9543bde47a5d607730120b87bf0_JaffaCakes118
Files
-
83a2c9543bde47a5d607730120b87bf0_JaffaCakes118.exe windows:5 windows x86 arch:x86
1e5debc495bcdcccd5f5de03abf91a93
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateWindowExW
TabbedTextOutA
ShowWindow
RegisterClassExW
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
SetWindowPos
DialogBoxParamW
CheckDlgButton
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetForegroundWindow
CheckRadioButton
wsprintfW
SendMessageTimeoutW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
IsWindow
GetDlgItem
LoadImageW
GetDC
InvalidateRect
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
TranslateMessage
GetMessageW
PostMessageW
PeekMessageW
SetWindowLongW
GrayStringW
DrawTextExW
TabbedTextOutW
PostQuitMessage
GetWindow
SetWindowContextHelpId
MapDialogRect
GetWindowThreadProcessId
SendMessageW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
BringWindowToTop
ExitWindowsEx
LoadBitmapW
SetWindowTextW
LoadCursorW
LoadIconW
comdlg32
GetFileTitleW
shell32
SHGetFolderPathW
ShellExecuteW
SHGetMalloc
advapi32
AllocateAndInitializeSid
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegDeleteKeyW
RegSetValueExW
FreeSid
CheckTokenMembership
AdjustTokenPrivileges
RegQueryValueExW
OpenProcessToken
RegOpenKeyW
RegEnumKeyW
RegQueryValueW
RegOpenKeyExW
LookupPrivilegeValueW
gdi32
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
PtVisible
GetObjectW
SetBkMode
GetStockObject
DeleteObject
SetTextColor
SelectObject
CreateBrushIndirect
SetTextAlign
RectVisible
TextOutW
ExtTextOutW
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
ScaleViewportExtEx
DPtoLP
GetRgnBox
GetTextColor
GetBkColor
GetMapMode
CreateRectRgnIndirect
CreateFontIndirectW
GetDeviceCaps
Escape
shlwapi
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathAddBackslashW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
kernel32
TerminateProcess
GetModuleFileNameA
GetStdHandle
ExitProcess
GetProcAddress
GetModuleHandleW
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
HeapFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStartupInfoA
GetCurrentProcess
GetSystemTimeAsFileTime
HeapAlloc
UpdateResourceW
EndUpdateResourceW
WriteFile
ReadFile
SetFilePointerEx
FindResourceExW
CreateMutexW
ReleaseMutex
GetCurrentThreadId
GetUserDefaultLCID
GetSystemDefaultLangID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetCurrentDirectoryW
CreateThread
WaitForSingleObject
CloseHandle
IsDebuggerPresent
GetModuleHandleA
WideCharToMultiByte
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
HeapSize
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
GetStringTypeA
GetStringTypeW
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
GetCommandLineA
GetModuleFileNameW
GetLastError
Sleep
FindResourceW
LoadResource
SizeofResource
PeekNamedPipe
LockResource
LCMapStringW
CreateSemaphoreW
GlobalLock
GetOverlappedResult
EnumResourceNamesW
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ