Static task
static1
Behavioral task
behavioral1
Sample
b3451458716768a003484c4fb700db44_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b3451458716768a003484c4fb700db44_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
b3451458716768a003484c4fb700db44_JaffaCakes118
-
Size
276KB
-
MD5
b3451458716768a003484c4fb700db44
-
SHA1
26f2f2def92bc2af307484dbd40a847f111389e2
-
SHA256
c58d2fa755ed885f81b6f4705af92f5ef8c9a43a8bbd5cbcf081e97a4542a810
-
SHA512
beb7d353eb4f0a93b5a3a8a8e54811f6c2870e6f5f6f981a273842b63fa3a07ba0544c533d01dce68880f734aacceef0deb3a01fa229ca516dd021369f524c29
-
SSDEEP
6144:lsBLvxt3QSNOatCQ/Y4FlsY3SpFZGu/BKj2:+vxtguzw4jYnBL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3451458716768a003484c4fb700db44_JaffaCakes118
Files
-
b3451458716768a003484c4fb700db44_JaffaCakes118.exe windows:4 windows x86 arch:x86
a8af141abdf86699070f28a0b1dbc791
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
user32
UpdateWindow
AttachThreadInput
RegisterClassExW
GetDC
GetDlgItem
SetScrollInfo
DrawFocusRect
GetMonitorInfoW
GetClassInfoExW
SendMessageW
SetForegroundWindow
BeginPaint
GetParent
WindowFromPoint
DispatchMessageW
DeferWindowPos
GetAncestor
ScreenToClient
KillTimer
LoadStringW
GetWindowRect
ShowWindow
GetCursorPos
AdjustWindowRectEx
IsWindow
GetSystemMenu
ScrollWindowEx
LoadCursorW
EqualRect
SetTimer
TranslateMessage
DrawTextW
ReleaseDC
FindWindowW
wsprintfW
SetDlgItemTextW
SetWindowLongW
GetDlgCtrlID
GetClientRect
SetWindowPos
DestroyWindow
MonitorFromRect
DrawIconEx
EndPaint
CharNextW
LoadIconW
UnregisterClassA
GetWindowThreadProcessId
ClientToScreen
GetMenu
GetIconInfo
PtInRect
SystemParametersInfoW
PostMessageW
GetForegroundWindow
GetDesktopWindow
CreateDialogIndirectParamW
RedrawWindow
GetKeyState
GetWindowLongW
DialogBoxParamW
LoadImageW
IntersectRect
DestroyIcon
BeginDeferWindowPos
FillRect
MonitorFromWindow
IsIconic
EndDeferWindowPos
SetCursor
CallWindowProcW
CopyRect
GetWindowTextW
SendMessageTimeoutW
EndDialog
PeekMessageW
GetSysColor
EnableWindow
GetWindow
CreateWindowExW
SetWindowTextW
DefWindowProcW
GetSystemMetrics
WindowFromDC
InvalidateRect
EnableMenuItem
SetFocus
GetScrollInfo
SetRect
GetMessageW
FindWindowExW
GetTopWindow
GetNextDlgTabItem
MapWindowPoints
oleaut32
VarUI4FromStr
gdi32
CreateSolidBrush
GetClipBox
DeleteDC
DPtoLP
CreateCompatibleBitmap
TextOutW
SetTextJustification
SetBkColor
CreateBitmap
Rectangle
StretchBlt
EnumFontFamiliesExW
SetBkMode
SetTextAlign
SetTextColor
GetTextMetricsW
CreateCompatibleDC
CreateFontIndirectW
GetMapMode
SetWindowOrgEx
CreateDCW
GetDeviceCaps
SetMapMode
SelectObject
GetObjectW
DeleteObject
GetTextExtentPoint32W
GetStockObject
BitBlt
comctl32
InitCommonControlsEx
kernel32
CreateMutexW
lstrcmpiW
SetLastError
GetFileSize
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
CloseHandle
ReleaseMutex
HeapDestroy
ReadFile
SizeofResource
EnterCriticalSection
VirtualAlloc
OutputDebugStringW
GetACP
LockResource
GetCurrentThreadId
FreeLibrary
LoadLibraryExW
DeleteCriticalSection
HeapSize
MulDiv
HeapAlloc
LoadResource
GetProcessHeap
FreeResource
FindResourceExW
SetUnhandledExceptionFilter
lstrlenW
RaiseException
lstrlenA
UnhandledExceptionFilter
FindResourceW
VirtualFree
WideCharToMultiByte
HeapReAlloc
CreateFileW
LeaveCriticalSection
FlushInstructionCache
IsDebuggerPresent
LocalAlloc
HeapFree
GetModuleHandleW
GetLocalTime
VirtualAllocEx
atl
AtlModuleInit
AtlAxGetControl
AtlPixelToHiMetric
DllRegisterServer
AtlAxCreateDialogW
AtlComPtrAssign
AtlRegisterClassCategoriesHelper
rasppp
RasCpEnumProtocolIds
RasCpGetInfo
Sections
.EkYmj Size: 1024B - Virtual size: 33KB
IMAGE_SCN_MEM_READ
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jeRh Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qory Size: 512B - Virtual size: 191B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fnTHzA Size: 1024B - Virtual size: 881B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.OMKVe Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 219KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SnBF Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iiamrpR Size: 512B - Virtual size: 142B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uCVnl Size: 1024B - Virtual size: 910B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Icvzd Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nJgCrv Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.WpujoIn Size: 512B - Virtual size: 217B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE