Static task
static1
Behavioral task
behavioral1
Sample
8809358a7ba3713a7bd2d2852779ea30_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8809358a7ba3713a7bd2d2852779ea30_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
8809358a7ba3713a7bd2d2852779ea30_JaffaCakes118
-
Size
233KB
-
MD5
8809358a7ba3713a7bd2d2852779ea30
-
SHA1
8c6e6695420e5a34c4df6ea167a57099a20e4f6d
-
SHA256
d869b676b66d5eced0970f66cf70ab0dfb3eba092437140bc94359d6bd2ee4a1
-
SHA512
5abe369be92406d5de80e12c983164f3757fb43786b974a2e37b152935fe3b0d5196252ae73bf9430fdb2c3718f3447c1b3ad8e0355cfa2df6f82e17b8d32479
-
SSDEEP
3072:65hH+Ye7/5XLTQugRt4dS+TX3/K+GhAiRTMguDqQhw+JysEnVtZMBtP4:khH+JSw3XvPGchwWyxn7ZgW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8809358a7ba3713a7bd2d2852779ea30_JaffaCakes118
Files
-
8809358a7ba3713a7bd2d2852779ea30_JaffaCakes118.exe windows:5 windows x86 arch:x86
456bcc36ff57f6196f5567c220c04139
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostMessageW
GetSystemMetrics
GetDesktopWindow
MapWindowPoints
OpenClipboard
DrawCaption
GetKeyboardLayoutNameW
GetScrollRange
GetWindowLongA
TrackMouseEvent
GetTopWindow
ToAscii
DrawIconEx
GetActiveWindow
GetClipboardSequenceNumber
GetTitleBarInfo
GetMessagePos
OpenInputDesktop
ScrollWindow
IsCharUpperW
CreateAcceleratorTableW
ValidateRgn
GetClassWord
MessageBoxA
EmptyClipboard
shell32
CommandLineToArgvW
gdi32
GetRandomRgn
TextOutW
Arc
SelectClipRgn
RemoveFontResourceExA
SetArcDirection
GetWindowOrgEx
GetOutlineTextMetricsA
SetColorAdjustment
ExtFloodFill
Chord
GetPaletteEntries
GetBitmapDimensionEx
GetCharWidthA
TranslateCharsetInfo
SetDCBrushColor
SetBitmapDimensionEx
GetNearestColor
GetEnhMetaFileDescriptionW
GetCharWidth32W
GetObjectA
DeleteMetaFile
DeleteColorSpace
EnumICMProfilesA
DrawEscape
DeleteDC
DPtoLP
GetCharABCWidthsFloatA
GetNearestPaletteIndex
GetArcDirection
GetRgnBox
GetWorldTransform
SetSystemPaletteUse
GetBkColor
OffsetClipRgn
GetViewportOrgEx
kernel32
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
RaiseException
HeapSize
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
HeapAlloc
GetCommMask
GlobalUnlock
GetModuleFileNameW
GetLogicalDrives
GetCommandLineA
AreFileApisANSI
CreateTimerQueue
ConvertFiberToThread
GetProcessTimes
IsProcessInJob
GetThreadSelectorEntry
QueueUserAPC
SetFileApisToOEM
CopyFileA
SetEndOfFile
GetSystemDirectoryA
OpenProcess
ReleaseMutex
RemoveDirectoryA
IsBadReadPtr
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetConsoleCP
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ