Static task
static1
Behavioral task
behavioral1
Sample
dc13e7d8c12a96c44d138bc2e3b08cc5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc13e7d8c12a96c44d138bc2e3b08cc5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
dc13e7d8c12a96c44d138bc2e3b08cc5_JaffaCakes118
-
Size
325KB
-
MD5
dc13e7d8c12a96c44d138bc2e3b08cc5
-
SHA1
29dd6a30dfea183e0fffeb31ddf1389437364a4e
-
SHA256
e2d9ec16ddadd92cac691a18a686003a703b77ef1b1cb7a7847f1aab6880bd6a
-
SHA512
17fa6571bb0c60735b824b80c6b271800c4b6278b552901effb8fa3c9fe7ef00e5413d6a5dbfa079c94c671ab1079e94ecfbf1deebba0753b26fa07fc6e1a29d
-
SSDEEP
6144:J03tj8he5ffi+0kAGlmECjPwiM7R5imi7Tunv+9g1:J0djJfi9GUPq7/iU8g1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc13e7d8c12a96c44d138bc2e3b08cc5_JaffaCakes118
Files
-
dc13e7d8c12a96c44d138bc2e3b08cc5_JaffaCakes118.exe windows:5 windows x86 arch:x86
7e5bacc6d801d3616a8cca4d411d884e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDlgCtrlID
MsgWaitForMultipleObjectsEx
GetClipboardViewer
GetMessageExtraInfo
RedrawWindow
ShowCursor
GetMenuItemCount
LoadIconA
TrackPopupMenu
CloseClipboard
IsWindow
GetInputState
IsMenu
RegisterHotKey
CopyIcon
ole32
OleInitialize
CoTaskMemFree
OleUninitialize
CoCreateInstance
advapi32
RegCloseKey
RegDeleteKeyW
gdi32
GetTextColor
GetEnhMetaFileDescriptionW
GdiTransparentBlt
ResetDCW
FrameRgn
PlayMetaFile
GetFontLanguageInfo
GetOutlineTextMetricsW
Escape
MaskBlt
SetLayout
GetWindowExtEx
MoveToEx
GetCharABCWidthsFloatW
GetFontData
GetCharWidthA
ExtFloodFill
GetCharWidthFloatA
CreatePatternBrush
CreateSolidBrush
GetCharWidthW
GetWindowOrgEx
ArcTo
CreateCompatibleDC
GetDIBits
GetMapMode
netapi32
NetUserAdd
kernel32
GetLocaleInfoA
LoadLibraryA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SizeofResource
AreFileApisANSI
GetEnvironmentStringsW
LocalUnlock
GetTapeStatus
CreateMemoryResourceNotification
DecodePointer
GetCurrentProcessId
GetEnvironmentStrings
CreateDirectoryW
CreateEventW
CreateFileW
CreateProcessW
DeleteFileW
EnumCalendarInfoW
FindResourceW
FormatMessageW
GetCPInfo
GetCurrentProcess
GetDiskFreeSpaceW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetUserDefaultLangID
GetVersionExW
GetWindowsDirectoryW
LoadLibraryW
LoadResource
LockResource
ReadFile
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetLastError
SignalObjectAndWait
VirtualProtect
WaitForSingleObject
CloseHandle
GetStdHandle
RaiseException
RtlUnwind
UnhandledExceptionFilter
WriteFile
ExitProcess
FindClose
FindFirstFileW
FreeLibrary
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetThreadLocale
LoadLibraryExW
lstrcpynW
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
VirtualQuery
GetCurrentThreadId
GetVersion
QueryPerformanceCounter
GetTickCount
VirtualAlloc
VirtualFree
Sleep
GetACP
SetPriorityClass
GetSystemInfo
SetCurrentDirectoryW
GetCommandLineW
HeapReAlloc
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
DeleteCriticalSection
HeapCreate
HeapFree
GetModuleHandleA
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetFileType
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ