Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_49f54eb1429c3671f84f2a267cb6b000.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_49f54eb1429c3671f84f2a267cb6b000
-
Size
1007KB
-
MD5
49f54eb1429c3671f84f2a267cb6b000
-
SHA1
1e4eecf19f0ffa7c4578fb1386a31ea02a364a70
-
SHA256
e5487e53861853c008db6f0d7a0c802fd177bb40aa14d0fecde9a1342d3e1cf7
-
SHA512
78b85eb6b0bdae44f072d33b13d505df93371aa44068e162a389775413f1769cdf1c624b070db0113db2e589a6af6b7d062b8838219fc551acffc4871d12ee15
-
SSDEEP
24576:3fZVNEpgxyfQhcQZC3NZCzCyPlpSgaTSTf6c:3fZ/EpA9cZ3ClpSg0STf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_49f54eb1429c3671f84f2a267cb6b000
Files
-
JaffaCakes118_49f54eb1429c3671f84f2a267cb6b000.exe windows:5 windows x86 arch:x86
a9de43579db91f98d8219ddd413b7a86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
wininet
InternetSetOptionW
HttpOpenRequestW
InternetCloseHandle
kernel32
EnterCriticalSection
LeaveCriticalSection
GetFileSize
GetFileSizeEx
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
FindClose
GetSystemTimeAsFileTime
GetFileAttributesW
FindFirstFileW
LocalAlloc
LocalFree
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
FreeLibrary
TerminateProcess
GetVersion
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
RaiseException
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
MulDiv
lstrcmpW
CreateMutexW
OpenMutexW
GetFileType
CreateThread
GetModuleFileNameW
lstrcmpiW
LoadLibraryExW
GetStdHandle
QueryPerformanceCounter
GlobalMemoryStatus
GetModuleHandleA
FlushConsoleInputBuffer
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetConsoleCtrlHandler
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetCommandLineW
IsDebuggerPresent
RtlUnwind
GetStringTypeW
EncodePointer
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetConsoleCP
HeapSize
HeapReAlloc
HeapDestroy
SetLastError
GetOEMCP
LoadLibraryW
PeekNamedPipe
GetTickCount
GetTimeZoneInformation
CloseHandle
SizeofResource
LoadResource
Sleep
GetLastError
OpenThread
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetCurrentProcessId
GetProcessHeap
HeapFree
HeapAlloc
GetDiskFreeSpaceW
FindNextFileW
CreateFileW
WideCharToMultiByte
MultiByteToWideChar
GetTempPathW
FindResourceExW
FindResourceW
GetVersionExA
GetModuleHandleW
LockResource
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
SetFilePointerEx
SetStdHandle
ReadConsoleW
FreeEnvironmentStringsW
WaitForMultipleObjects
GetEnvironmentStringsW
user32
GetUserObjectInformationW
FindWindowExW
GetProcessWindowStation
LoadCursorW
GetWindow
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
FillRect
GetSysColor
ScreenToClient
MessageBoxA
ClientToScreen
GetClientRect
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableW
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextW
GetDlgItem
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
SendMessageW
RegisterWindowMessageW
PostMessageW
UnregisterClassW
GetWindowTextLengthW
gdi32
GetObjectW
SelectObject
GetStockObject
GetDeviceCaps
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetSidSubAuthority
GetSidSubAuthorityCount
RegDeleteValueW
RegQueryInfoKeyW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
GetTokenInformation
ole32
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
CoTaskMemRealloc
CoGetClassObject
oleaut32
SysStringLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
SysAllocStringLen
OleCreateFontIndirect
SysAllocString
comctl32
InitCommonControlsEx
Sections
.text Size: 670KB - Virtual size: 669KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE