Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_35dacc8d9433c1d665d8fc8e7d2230d9.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_35dacc8d9433c1d665d8fc8e7d2230d9.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_35dacc8d9433c1d665d8fc8e7d2230d9
-
Size
181KB
-
MD5
35dacc8d9433c1d665d8fc8e7d2230d9
-
SHA1
747310209962a26c7897af56b4b9c96d6617df08
-
SHA256
4d6747c54616ad93970fcf4049e9879d3a43c8d1e33e1003efb6d06bd0a2fe39
-
SHA512
9508e12958b4d2a70b577b47aff97d42d9fbd2b2ebeb39ead2d6a378f16ce5413a1419934ec06d3ee9b04799d731811373d1051dfd9bfbf8e3a6681578917ca2
-
SSDEEP
3072:0qwIa2avt+eVvvIurFd9IBzRj4kWSGC28/GlOF/ebIq:0V2pQwuVsz+kWWwM/ebI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_35dacc8d9433c1d665d8fc8e7d2230d9
Files
-
JaffaCakes118_35dacc8d9433c1d665d8fc8e7d2230d9.exe windows:4 windows x86 arch:x86
8c05c5c14c1caa2f4df85c395e49e079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
shell32
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
shlwapi
PathFileExistsW
PathCombineW
gdi32
CreateDIBitmap
CreateCompatibleBitmap
StretchDIBits
BitBlt
CreateSolidBrush
CreateDIBSection
CreateCompatibleDC
CreateFontA
GetStockObject
SetStretchBltMode
ExtEscape
RealizePalette
DeleteDC
DeleteObject
SelectPalette
GetDIBits
GetObjectA
GetDeviceCaps
SelectObject
SetBkMode
user32
EnumDisplayDevicesA
KillTimer
GetWindowRect
SetWindowTextA
GetDC
InvalidateRect
EqualRect
MsgWaitForMultipleObjects
CopyRect
SendNotifyMessageA
DestroyWindow
IsWindow
SetFocus
GetWindowTextLengthA
wsprintfA
SetTimer
GetWindow
CreateWindowExA
ReleaseDC
SendMessageTimeoutA
GetDlgItem
GetSysColor
MoveWindow
RegisterWindowMessageA
DispatchMessageA
SetCapture
PostMessageA
SetRect
DestroyAcceleratorTable
GetWindowTextA
BeginPaint
UnregisterClassA
GetFocus
GetActiveWindow
CharNextA
wvsprintfA
InvalidateRgn
FillRect
DrawTextA
SendMessageA
SetWindowLongA
GetWindowLongA
RedrawWindow
ShowWindow
GetQueueStatus
GetClassNameA
SetParent
ReleaseCapture
EndPaint
DefWindowProcA
RegisterClassExA
CreateDialogParamA
CallWindowProcA
LoadCursorA
GetParent
FindWindowA
GetDesktopWindow
GetClassInfoExA
IsChild
PeekMessageA
PostThreadMessageA
GetClientRect
CreateAcceleratorTableA
SetWindowPos
advapi32
RegQueryValueExA
CryptReleaseContext
CryptImportKey
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
CryptGetHashParam
RegSetValueExA
CryptDestroyHash
CryptCreateHash
CryptAcquireContextA
CryptDestroyKey
RegEnumValueA
CryptEncrypt
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
CryptHashData
RegDeleteKeyA
kernel32
SetFilePointer
GlobalAlloc
GetLongPathNameW
WideCharToMultiByte
Sleep
GetTickCount
GetFileSize
GlobalSize
GetProcessHandleCount
GlobalFree
LocalAlloc
CreateFileW
MapViewOfFile
EnumResourceTypesA
UnmapViewOfFile
WriteFile
GetFileAttributesA
ReadFile
LocalFree
DisableThreadLibraryCalls
CreateFileMappingA
CreateFileA
CloseHandle
setupapi
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
ole32
CreateStreamOnHGlobal
CoTaskMemRealloc
CreateItemMoniker
StgCreateDocfile
CoTaskMemFree
StringFromGUID2
OleLockRunning
CoInitializeSecurity
CreateBindCtx
BindMoniker
GetRunningObjectTable
CoTaskMemAlloc
CLSIDFromProgID
CoGetClassObject
CoUninitialize
StgOpenStorage
CoCreateInstance
CoInitialize
StgIsStorageFile
OleInitialize
OleUninitialize
CoSetProxyBlanket
CLSIDFromString
Sections
.text Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ