Static task
static1
Behavioral task
behavioral1
Sample
ec7dbb683dab64773c2e078349c8b42d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
ec7dbb683dab64773c2e078349c8b42d_JaffaCakes118
-
Size
176KB
-
MD5
ec7dbb683dab64773c2e078349c8b42d
-
SHA1
57bfca8c885d5af870ad77fddf8c1d2825bb3f9f
-
SHA256
9d06c234179fbc06b11c66d5e5de79630ac1f6fa045a93394f11e80353d51150
-
SHA512
f9030fb149437ba3ddfe9c2c7b7c880523f381ffaa8a3c4d25bc28ea78b2701ce66a4141c1904b1e29d5e559539d3120413e296b52b2dbd2d515cc69e5e0f72b
-
SSDEEP
3072:TuAPwqxrVzjpz1in36COUxRKqovt7ecDU9FUxtKmRl7nb4luO2I:p7ztzQD5AFdDUIxR64O2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec7dbb683dab64773c2e078349c8b42d_JaffaCakes118
Files
-
ec7dbb683dab64773c2e078349c8b42d_JaffaCakes118.exe windows:4 windows x86 arch:x86
f4f85ea78a0d18e9d07f97d807415b41
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleUninitialize
CoRevokeClassObject
CoGetClassObject
CreateILockBytesOnHGlobal
OleInitialize
CoRetireServer
CoTaskMemAlloc
StgOpenStorageOnILockBytes
CoUninitialize
CoRegisterMessageFilter
OleFlushClipboard
CoTaskMemFree
StgCreateDocfileOnILockBytes
CLSIDFromProgID
OleIsCurrentClipboard
CoCreateInstance
CoInitialize
CoFreeUnusedLibraries
CLSIDFromString
gdi32
CreateBrushIndirect
CreateCompatibleBitmap
PatBlt
CreateRectRgn
GetViewportOrgEx
ExtEscape
StartDocW
DeleteObject
BitBlt
CombineRgn
LineTo
GetDeviceCaps
CreateBitmap
GetGraphicsMode
EndDoc
GetObjectA
SetGraphicsMode
ExtCreatePen
ModifyWorldTransform
GetDIBColorTable
DeleteDC
SelectClipRgn
MoveToEx
SelectObject
SetMiterLimit
Escape
SetROP2
EndPage
SelectClipPath
BeginPath
SaveDC
AbortDoc
EqualRgn
CreateCompatibleDC
FillPath
CreateICW
SetStretchBltMode
OffsetRgn
Rectangle
SetPolyFillMode
PolyBezierTo
GetRegionData
GetRgnBox
StretchBlt
StartPage
CreatePatternBrush
CreateDIBSection
PolylineTo
EndPath
SelectPalette
GetStockObject
GetClipBox
GetCurrentObject
SetBrushOrgEx
RestoreDC
CreatePolyPolygonRgn
GetWorldTransform
CreatePalette
RealizePalette
IntersectClipRect
ExtSelectClipRgn
CloseFigure
SetDIBits
CreateDCW
SetWorldTransform
StrokePath
ResetDCW
StretchDIBits
PolyDraw
shlwapi
PathRemoveFileSpecA
PathAppendA
user32
DestroyWindow
ReleaseDC
LoadCursorA
SetWindowPos
CharNextW
SetActiveWindow
GetSystemMetrics
GetActiveWindow
GetWindowRect
GetDC
ScrollWindowEx
MonitorFromPoint
GetClientRect
OffsetRect
EnumDisplayMonitors
DefWindowProcA
LoadIconA
GetMonitorInfoA
WindowFromDC
MonitorFromWindow
CreateWindowExA
RegisterClassA
GetDesktopWindow
UnregisterClassA
msimg32
AlphaBlend
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
kernel32
GetCalendarInfoW
QueryPerformanceCounter
GetModuleFileNameA
WideCharToMultiByte
ExitProcess
GlobalLock
GetWindowsDirectoryA
FindFirstFileA
GetFileTime
GetTempPathW
GetProfileStringW
EnterCriticalSection
GetSystemDirectoryA
FindClose
GetCurrentDirectoryA
GetThreadPriority
GlobalAlloc
FindNextFileA
GetDateFormatW
IsDebuggerPresent
GetModuleHandleA
GetThreadLocale
GetSystemDefaultLCID
GetACP
FreeLibrary
GetCurrentThreadId
ReadFile
CreateFileA
GetLastError
IsProcessorFeaturePresent
LoadLibraryA
TerminateProcess
TlsSetValue
GlobalFree
ReleaseSemaphore
GetDateFormatA
GetFileSize
SetCurrentDirectoryA
WaitForSingleObject
CloseHandle
SetUnhandledExceptionFilter
DeleteCriticalSection
GetTimeFormatW
TlsGetValue
EnumResourceNamesA
CreateMutexA
GetLocalTime
InitializeCriticalSection
MultiByteToWideChar
InterlockedExchange
lstrcmpW
GetSystemInfo
GetLocaleInfoA
GetEnvironmentVariableW
Sleep
lstrlenW
DeleteFileW
UnhandledExceptionFilter
GetProcAddress
GetTickCount
GetVersionExA
GetCurrentThread
SetThreadPriority
CreateSemaphoreA
GetTimeFormatA
GlobalSize
LocalAlloc
GetCurrentProcess
LeaveCriticalSection
InterlockedCompareExchange
GetUserDefaultLangID
GlobalUnlock
TlsFree
GetCurrentProcessId
InterlockedIncrement
ReleaseMutex
GetSystemTimeAsFileTime
RaiseException
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ