Static task
static1
Behavioral task
behavioral1
Sample
ec0b8efafb6aa8043ce6e923ab6e64be_JaffaCakes118.exe
Resource
win7-20241023-en
General
-
Target
ec0b8efafb6aa8043ce6e923ab6e64be_JaffaCakes118
-
Size
175KB
-
MD5
ec0b8efafb6aa8043ce6e923ab6e64be
-
SHA1
6b8cc0c2430750d1d4b2a2a0d190a95eac46bb8b
-
SHA256
bc4e184421188a6f3899f637bf3074f0fead80f806e069cbcd7e11d0640b5301
-
SHA512
8c6d34f349504dfc840634a14490b9a77088d025efc58acd7177981cffe0695bfaad154708be0d4abeeba1891f2f67ed0d0887b61020426c6a532b8a195ded46
-
SSDEEP
3072:hjM1X4NZ8POD5njLC8qkFcmphvg3Ba7Ecti0d5rsyTvOL+kb041Av8A1:iZ4NZaMLC8qkVvma77t9wH+kbHs8A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec0b8efafb6aa8043ce6e923ab6e64be_JaffaCakes118
Files
-
ec0b8efafb6aa8043ce6e923ab6e64be_JaffaCakes118.exe windows:4 windows x86 arch:x86
4e7600ced1bf1a2fccae0fbb12af4d4c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveFileSpecA
PathAppendA
kernel32
GetThreadPriority
GetCurrentDirectoryA
GetSystemInfo
EnterCriticalSection
lstrlenW
GetDateFormatW
FreeLibrary
GetTempPathW
IsDebuggerPresent
GetCalendarInfoW
GetFileTime
TlsSetValue
ReadFile
WaitForSingleObject
QueryPerformanceCounter
GetModuleFileNameA
GetSystemDefaultLCID
LoadLibraryA
WideCharToMultiByte
GetLastError
TlsGetValue
GetCurrentProcessId
SetUnhandledExceptionFilter
LeaveCriticalSection
GlobalSize
UnhandledExceptionFilter
GetThreadLocale
lstrcmpW
CloseHandle
InterlockedExchange
GetCurrentThread
LocalAlloc
DeleteFileW
GetFileSize
GetTickCount
IsProcessorFeaturePresent
DeleteCriticalSection
FindClose
GetUserDefaultLangID
EnumResourceNamesA
GetSystemTimeAsFileTime
TlsFree
GetVersionExA
GetLocaleInfoA
GetCurrentProcess
CreateFileA
GetCurrentThreadId
GlobalFree
CreateMutexA
GetTimeFormatW
GetACP
GlobalAlloc
InterlockedCompareExchange
GlobalUnlock
ExitProcess
GetEnvironmentVariableW
FindFirstFileA
GetTimeFormatA
Sleep
ReleaseMutex
InitializeCriticalSection
SetThreadPriority
GetDateFormatA
FindNextFileA
GetWindowsDirectoryA
GlobalLock
CreateSemaphoreA
InterlockedIncrement
SetCurrentDirectoryA
GetProcAddress
GetSystemDirectoryA
GetProfileStringW
GetLocalTime
ReleaseSemaphore
MultiByteToWideChar
TerminateProcess
GetModuleHandleA
RaiseException
gdi32
SetWorldTransform
GetClipBox
IntersectClipRect
SetMiterLimit
DeleteObject
CreatePalette
SetPolyFillMode
RealizePalette
SetROP2
CreateICW
CreateCompatibleBitmap
CreateDIBSection
StretchDIBits
SetDIBits
EndPath
GetWorldTransform
DeleteDC
SetBrushOrgEx
StartPage
CreateRectRgn
SelectClipRgn
SetStretchBltMode
ExtCreatePen
StretchBlt
BitBlt
ExtEscape
CreateDCW
ResetDCW
PolyBezierTo
ModifyWorldTransform
EqualRgn
CloseFigure
GetRgnBox
RestoreDC
GetCurrentObject
CreateCompatibleDC
CreatePolyPolygonRgn
BeginPath
AbortDoc
SetGraphicsMode
GetViewportOrgEx
GetObjectA
Escape
SaveDC
GetDeviceCaps
GetRegionData
CombineRgn
PolylineTo
EndDoc
GetDIBColorTable
StrokePath
SelectClipPath
LineTo
StartDocW
SelectPalette
SelectObject
MoveToEx
PatBlt
CreatePatternBrush
EndPage
GetGraphicsMode
FillPath
CreateBrushIndirect
GetStockObject
OffsetRgn
Rectangle
CreateBitmap
ExtSelectClipRgn
PolyDraw
advapi32
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
user32
ScrollWindowEx
OffsetRect
WindowFromDC
GetWindowRect
RegisterClassA
EnumDisplayMonitors
GetDC
SetWindowPos
CharNextW
MonitorFromPoint
ReleaseDC
GetSystemMetrics
MonitorFromWindow
GetActiveWindow
LoadIconA
GetClientRect
GetDesktopWindow
SetActiveWindow
DefWindowProcA
CreateWindowExA
DestroyWindow
LoadCursorA
GetMonitorInfoA
UnregisterClassA
ole32
CreateILockBytesOnHGlobal
OleUninitialize
CoInitialize
CLSIDFromProgID
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoRetireServer
CoTaskMemAlloc
CoGetClassObject
OleFlushClipboard
CoRevokeClassObject
CoUninitialize
OleIsCurrentClipboard
CoTaskMemFree
CoFreeUnusedLibraries
OleInitialize
StgCreateDocfileOnILockBytes
CoCreateInstance
CLSIDFromString
msimg32
AlphaBlend
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ