Static task
static1
Behavioral task
behavioral1
Sample
a7918e736e5583bd8952d34fe3d8cd7f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a7918e736e5583bd8952d34fe3d8cd7f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
a7918e736e5583bd8952d34fe3d8cd7f_JaffaCakes118
-
Size
287KB
-
MD5
a7918e736e5583bd8952d34fe3d8cd7f
-
SHA1
686cdfef4458b28b5fe37ea421886fbaf2fc9da6
-
SHA256
4da4801c5ae6e801b978c430fb733e28443e98510af818246f34101f5686556c
-
SHA512
9db7265e510d6a23fdddb7a74a482145e91df835815287d6dc33509ae77b0ebf9005b8e0c37bd94fd119c7147541856d4d837bbadcdf60b30c73410eef5b7156
-
SSDEEP
3072:u9QDp3692dmvQDWiQcfTcGwDwzAKKWkVZ/e/M3rkVV3Yw1RwnKPGxWpQxr5d2dhq:iqqNvQDseAKjN84VV33DpI2dHc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7918e736e5583bd8952d34fe3d8cd7f_JaffaCakes118
Files
-
a7918e736e5583bd8952d34fe3d8cd7f_JaffaCakes118.exe windows:5 windows x86 arch:x86
144cd887b4d6de7b38894f15f6bccef6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
LoadLibraryA
GetNumberFormatW
GlobalMemoryStatusEx
FindNextFileA
SetConsoleTitleW
GetModuleHandleA
lstrcatW
GetConsoleTitleW
GetCurrentThreadId
CloseHandle
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetProcAddress
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCurrentProcess
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
SetFilePointer
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
ReadFile
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetFileType
GetStdHandle
SetHandleCount
lstrcmpiA
GetCurrentDirectoryW
GetLastError
FindFirstFileA
SetCurrentDirectoryA
MultiByteToWideChar
TerminateProcess
GetVersionExW
GetConsoleWindow
Sleep
OpenProcess
GetTickCount
GetACP
GetLogicalDrives
GetCPInfo
LCMapStringW
WideCharToMultiByte
LCMapStringA
RaiseException
RtlUnwind
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
HeapAlloc
GetEnvironmentStrings
lstrlenA
user32
UpdateWindow
SetDlgItemTextW
GetWindowThreadProcessId
GetWindow
DestroyIcon
LoadCursorA
DispatchMessageA
PostMessageA
IsWindow
ShowWindow
CheckDlgButton
GetCursorPos
SetWindowPos
DefWindowProcA
GetDlgItem
ReleaseDC
PeekMessageA
EnableWindow
GetCursor
MessageBoxW
EnumThreadWindows
SetWindowTextA
EndPaint
DestroyWindow
SetCursor
GetMessageA
EnumDisplayDevicesW
GetSystemMenu
SetTimer
RegisterClassExA
PostQuitMessage
GetKeyNameTextA
SetKeyboardState
DrawTextW
KillTimer
GetParent
AttachThreadInput
LoadIconA
WaitForInputIdle
IsWindowEnabled
wsprintfA
WindowFromPoint
FindWindowW
GetClientRect
SendMessageA
BeginPaint
wsprintfW
DlgDirListA
GetDC
TranslateMessage
GetKeyboardState
GetCursorInfo
GetWindowTextA
MapVirtualKeyA
MessageBoxA
InvalidateRect
CreateWindowExA
gdi32
SetTextColor
DeleteDC
SetBrushOrgEx
CreateBitmap
DeleteObject
SelectObject
Ellipse
CreateFontW
CreatePatternBrush
CreatePen
GetStockObject
CreateSolidBrush
PatBlt
shell32
SHGetFileInfoA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
ole32
RegisterDragDrop
CoInitializeEx
CoGetClassObject
CoInitializeSecurity
OleInitialize
OleSetContainedObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoCreateInstance
OleCreate
oleaut32
SysAllocStringByteLen
VariantInit
SystemTimeToVariantTime
psapi
GetProcessMemoryInfo
msacm32
acmStreamUnprepareHeader
winmm
mmioClose
mmioOpenW
mmioDescend
mmioWrite
mmioAscend
mmioCreateChunk
mmioRead
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
shlwapi
SHCreateStreamOnFileEx
comctl32
ord6
ImageList_ReplaceIcon
opengl32
glViewport
glMatrixMode
glLoadIdentity
setupapi
SetupDiGetClassDevsA
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ