Static task
static1
Behavioral task
behavioral1
Sample
af92a2306ba7b9fe5e2e2cb9938f88a2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
af92a2306ba7b9fe5e2e2cb9938f88a2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
af92a2306ba7b9fe5e2e2cb9938f88a2_JaffaCakes118
-
Size
189KB
-
MD5
af92a2306ba7b9fe5e2e2cb9938f88a2
-
SHA1
fc8f4604d249cad8fcdebd6e0811ab6694ff4316
-
SHA256
5a772f09670e545aafd69b9a9ddfab8bfb878daa07397aea18512a3bffbeefbf
-
SHA512
b1c9be4f715ed069a8acb1227e6ab5b8fb4398e343f407aae90513d1960637ea32b88c22a1c5a2d945cb57c3b32602b26049213d3ce33ab8210f3dea6f20d8d2
-
SSDEEP
3072:ss1C1eO/AJLndtpBT/Kwp2x2ggBBwHALxIUEzoPdMdyZ8uLD2fS23ey:b81eIirBT/7gx7gBDyU7FMs8cC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af92a2306ba7b9fe5e2e2cb9938f88a2_JaffaCakes118
Files
-
af92a2306ba7b9fe5e2e2cb9938f88a2_JaffaCakes118.exe windows:5 windows x86 arch:x86
7e166187b57bdef52e17bd6043846f2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
lstrcpyA
AreFileApisANSI
FreeLibrary
CloseHandle
WideCharToMultiByte
lstrcpynA
GetLastError
LoadLibraryA
GetModuleFileNameA
GlobalAlloc
CreateMutexA
lstrlenW
GetFileAttributesA
InterlockedDecrement
GetStartupInfoA
CreateProcessA
SetLastError
GlobalFree
ExitProcess
GetTickCount
ActivateActCtx
GetACP
GetOEMCP
VirtualProtect
LocalFree
MultiByteToWideChar
GetModuleHandleA
GetFullPathNameA
OutputDebugStringA
lstrlenA
GetCurrentThreadId
user32
GetDlgCtrlID
SetWindowTextA
SetForegroundWindow
DrawTextA
GetSystemMetrics
IsWindow
UpdateWindow
SendMessageA
FillRect
IsZoomed
IsWindowVisible
GetWindowRect
GetWindowTextA
TabbedTextOutA
PtInRect
GrayStringA
DefWindowProcA
EnumChildWindows
GetParent
EnableWindow
GetSystemMenu
IsWindowUnicode
wsprintfW
SetCapture
OffsetRect
ReleaseCapture
SetRect
gdi32
AngleArc
AddFontMemResourceEx
AbortDoc
RectVisible
LPtoDP
SetRectRgn
BitBlt
TextOutA
CreateFontIndirectA
DPtoLP
CreatePolygonRgn
GetTextColor
CombineRgn
Polyline
CreatePalette
CreateRectRgn
PtInRegion
GetObjectA
SetPixel
PtVisible
advapi32
RegQueryValueExW
RegCloseKey
RegSetValueExW
CryptDestroyHash
LsaClose
CryptDeriveKey
RegOpenKeyExA
RegDeleteValueA
RegDeleteValueW
CryptEncrypt
RegEnumValueA
CryptAcquireContextA
LsaOpenPolicy
EqualSid
CryptReleaseContext
RegEnumValueW
RegCreateKeyExA
FreeSid
RegCreateKeyExW
CryptCreateHash
CryptDestroyKey
CryptDecrypt
LsaFreeMemory
RegOpenKeyExW
IsTextUnicode
RegQueryValueExA
RegDeleteKeyW
RegOpenCurrentUser
RegEnumKeyW
CryptHashData
RegSetValueExA
RegOpenKeyA
shell32
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
ole32
CLSIDFromProgID
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitialize
StringFromCLSID
comctl32
InitCommonControlsEx
_TrackMouseEvent
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
oledlg
OleUIBusyW
psapi
GetModuleBaseNameA
msvcrt
__set_app_type
_mbscmp
malloc
__getmainargs
_onexit
_XcptFilter
_initterm
_vsnprintf
??1type_info@@UAE@XZ
_controlfp
__CxxFrameHandler
?terminate@@YAXXZ
__setusermatherr
free
__p__commode
_mbsicmp
_CIcos
_strdup
__p__fmode
_setmbcp
_except_handler3
_splitpath
_adjust_fdiv
_CxxThrowException
exit
_exit
_acmdln
__dllonexit
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ