Static task
static1
Behavioral task
behavioral1
Sample
855164792a0827678e96564bbd821baf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
855164792a0827678e96564bbd821baf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
855164792a0827678e96564bbd821baf_JaffaCakes118
-
Size
100KB
-
MD5
855164792a0827678e96564bbd821baf
-
SHA1
bd80782b36195bf218f4a29bc8f5ee2913ced4a8
-
SHA256
cb4b8c0fc58e5fe13c5f600a9823640f424ef47e2f6fb29ae19278cfa0910440
-
SHA512
6dee8597cdc5db90014a82095bbeba55deb32bd6c7efbcdd9cb09b3d31866ca25449b3638457662760abe574ee8253db8b8af5209f48649d8f5f8194f6ae7712
-
SSDEEP
3072:8MJKiyPLOQ5du67DxIPdms2NPBT7cGcDrQs8P:H/yDOQ5QYiPIs2rT7Hr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 855164792a0827678e96564bbd821baf_JaffaCakes118
Files
-
855164792a0827678e96564bbd821baf_JaffaCakes118.exe windows:5 windows x86 arch:x86
21175527efe4df8f28bc585a62ab457c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageW
SetDlgItemInt
SetWindowLongW
GetClientRect
GetWindowRect
DestroyWindow
GetDlgItemInt
MoveWindow
CheckDlgButton
LoadCursorW
GetDlgItem
SetCursor
DefWindowProcW
InvalidateRect
LoadStringW
IsRectEmpty
wsprintfW
EnableWindow
CreateDialogParamW
DispatchMessageW
GetWindowLongW
IsWindowVisible
SetDlgItemTextW
ClientToScreen
GetAsyncKeyState
PeekMessageW
GetDC
IsWindow
ShowWindow
GetDesktopWindow
TranslateMessage
ReleaseDC
CheckRadioButton
ole32
StringFromGUID2
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
msvfw32
ICLocate
ICClose
ICDecompress
ICSendMessage
ICGetInfo
ICOpen
ICCompress
winmm
waveInOpen
waveInGetDevCapsW
mixerGetLineInfoW
waveInUnprepareHeader
waveInPrepareHeader
waveInStart
mixerOpen
mixerSetControlDetails
mixerClose
waveInStop
mixerGetID
waveInReset
waveInClose
CloseDriver
mixerGetLineControlsW
OpenDriver
mixerGetControlDetailsW
SendDriverMessage
waveInAddBuffer
kernel32
GetDiskFreeSpaceW
PostQueuedCompletionStatus
InterlockedExchange
WaitForSingleObject
lstrlenW
GetProcessHeap
CloseHandle
GlobalHandle
CreateSemaphoreW
GlobalFree
lstrcpynW
IsBadCodePtr
ReleaseSemaphore
WideCharToMultiByte
EnterCriticalSection
GetStartupInfoA
lstrcpyW
MultiByteToWideChar
GetModuleFileNameA
GlobalLock
GetFullPathNameW
IsBadReadPtr
WriteFile
SetEvent
GetPrivateProfileStringW
GetCurrentProcessId
GlobalAlloc
GetVersionExW
CreateEventW
GetSystemTimeAsFileTime
GetCurrentProcess
WaitForMultipleObjects
GlobalUnlock
InterlockedDecrement
GlobalMemoryStatus
GetTickCount
GetQueuedCompletionStatus
GetCurrentThread
GetLastError
GetFileAttributesW
MulDiv
DeleteFileW
SetThreadPriority
GetProfileIntA
VirtualFree
InterlockedIncrement
GetSystemInfo
lstrcmpiW
LeaveCriticalSection
IsBadWritePtr
SetEndOfFile
DeleteCriticalSection
lstrcmpW
lstrlenA
lstrcpyA
GetSystemDefaultLangID
InitializeCriticalSection
GetFileSize
FreeLibrary
ResetEvent
SetFilePointer
HeapAlloc
ReadFile
GetThreadPriority
GetEnvironmentStringsW
CreateThread
CreateIoCompletionPort
SetUnhandledExceptionFilter
HeapFree
LoadLibraryW
QueryPerformanceCounter
CreateFileW
advapi32
RegDeleteKeyW
RegCreateKeyW
RegEnumKeyW
RegEnumKeyExW
RegQueryValueExW
RegSetValueExW
RegSetValueW
RegCloseKey
RegOpenKeyExW
RegOpenKeyW
msvcrt
_ftol
??3@YAXPAX@Z
wcslen
??2@YAPAXI@Z
_except_handler3
_purecall
gdi32
GetObjectW
PatBlt
GetStockObject
GetPaletteEntries
SelectObject
GetTextExtentPoint32W
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ