Static task
static1
Behavioral task
behavioral1
Sample
f79d62d88f9214e16a74f333dde314e0_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f79d62d88f9214e16a74f333dde314e0_JaffaCakes118
-
Size
192KB
-
MD5
f79d62d88f9214e16a74f333dde314e0
-
SHA1
dc9cbc06d262df44c84a19229663a81592c4bd03
-
SHA256
598c38de8411b9acb1fc1645686d6df0a697f6033decc27a715a8ab3ef90cae7
-
SHA512
62ee0738c99b7d78a0b351aede92b7596cf9c9e58cf0267a756ffe246bb3316d57c5e0c9fa3927cdbe498fe830e8fb25c6b95d73017178c8b9f6daf504ce3793
-
SSDEEP
3072:nXfB73q4Wh4v5fRQbJjyTRhC6I4/Xis4Ny5HQ2xn8PIIOTK0R9l8/RllsG1qaQNv:vBPd5fiNjmCI/y+5HJR8PIIcKK9Kpl14
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f79d62d88f9214e16a74f333dde314e0_JaffaCakes118
Files
-
f79d62d88f9214e16a74f333dde314e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
7419b525a1a8301742917ca7c4668fd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
VirtualQuery
RtlUnwind
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
HeapAlloc
SetStdHandle
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
WriteFile
CloseHandle
HeapFree
SetFilePointer
GetLastError
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeW
GetLocaleInfoA
LoadLibraryA
GetProcAddress
VirtualAllocEx
GetSystemInfo
FindClose
lstrcpynW
GlobalSize
GetExitCodeProcess
GetTempPathW
TerminateProcess
ExitProcess
GetVersionExA
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetConsoleOutputCP
FlushFileBuffers
InterlockedExchange
WideCharToMultiByte
LocalLock
GetFullPathNameW
LoadLibraryW
FormatMessageW
GetModuleFileNameW
DeleteCriticalSection
GetCurrentProcess
FileTimeToLocalFileTime
InterlockedCompareExchange
GetStringTypeA
GetOEMCP
Sleep
WaitForMultipleObjects
GetACP
GetEnvironmentStrings
VirtualProtect
user32
GetDC
DrawIcon
MoveWindow
ClientToScreen
SetWindowsHookExW
GetMenuState
UpdateWindow
ShowScrollBar
CreateCursor
CreateAcceleratorTableW
MonitorFromWindow
GetDlgItemTextW
GetMessageA
CharUpperW
IsWindowUnicode
ToAscii
EnableMenuItem
GetActiveWindow
RealChildWindowFromPoint
GetMenu
SendDlgItemMessageW
GetSystemMetrics
GetSubMenu
SetDlgItemInt
ShowWindow
InflateRect
WindowFromPoint
GetMenuStringW
GetMenuItemID
DestroyMenu
LoadIconW
DrawTextW
CreateCaret
SetWindowLongW
IsChild
gdi32
GetDeviceCaps
GetObjectW
SetTextAlign
EnumFontFamiliesExW
SetROP2
RestoreDC
Rectangle
SaveDC
ExtTextOutW
GetTextExtentPoint32W
CreateCompatibleDC
DPtoLP
DeleteDC
DeleteObject
AddFontResourceW
PatBlt
CreateHatchBrush
BitBlt
comdlg32
ChooseColorW
ChooseFontW
PageSetupDlgA
GetOpenFileNameA
ReplaceTextA
ChooseFontA
ReplaceTextW
PrintDlgW
FindTextA
GetSaveFileNameW
GetSaveFileNameA
ChooseColorA
GetOpenFileNameW
PrintDlgA
FindTextW
GetFileTitleA
PageSetupDlgW
advapi32
RegOpenKeyExA
RegCreateKeyW
RegSetValueExW
RegEnumKeyExA
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegQueryInfoKeyA
RegDeleteValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegSetValueExA
RegEnumKeyExW
RegCreateKeyA
RegOpenKeyExW
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 123KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE