Static task
static1
Behavioral task
behavioral1
Sample
ba85dd5a6e33c016c5662d264aa1928d_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
General
-
Target
ba85dd5a6e33c016c5662d264aa1928d_JaffaCakes118
-
Size
236KB
-
MD5
ba85dd5a6e33c016c5662d264aa1928d
-
SHA1
4ad5d9a9ae4db1fabcc444d8b768173b46ec2639
-
SHA256
725c4521bc78fe35edd67cedba90b3c56cd270c57edc1d5284160cd80e973ae5
-
SHA512
f1bac455c5cce2e385f63c133d49b48618a19babf6336be5e9934b642abcb949be7aeb88170c8592f637f4b664755e8beb5def0efa749f543b3ff4ed90babae9
-
SSDEEP
3072:zLdGL9Wt2ltzymHv7BeQj7UnIo9vPZy0iGGaaDVU1RIMvP507:1i9WtytJs00ZOq1RZvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ba85dd5a6e33c016c5662d264aa1928d_JaffaCakes118
Files
-
ba85dd5a6e33c016c5662d264aa1928d_JaffaCakes118.exe windows:4 windows x86 arch:x86
1a497fe608ed29e079b5491e59269d39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
RaiseException
HeapFree
HeapAlloc
TerminateProcess
HeapSize
HeapReAlloc
GetACP
LCMapStringA
LCMapStringW
Sleep
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
RtlUnwind
GetProfileStringA
InterlockedExchange
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
SetErrorMode
WritePrivateProfileStringA
SizeofResource
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetLastError
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
LocalFree
GlobalFree
ExitProcess
CloseHandle
lstrcpynA
GlobalLock
GlobalUnlock
MulDiv
SetLastError
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GetFileType
user32
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
WindowFromPoint
ClientToScreen
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ValidateRect
GetActiveWindow
TranslateMessage
GetMessageA
CreateDialogIndirectParamA
EndDialog
PostQuitMessage
SetCursor
LoadStringA
DestroyMenu
GetClassNameA
LoadCursorA
GetSysColorBrush
InvalidateRect
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
IsWindowEnabled
GetTopWindow
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
EnableWindow
PostMessageA
GetClientRect
IsRectEmpty
SetWindowTextA
GetCursorPos
RedrawWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
CharNextA
GetFocus
InflateRect
GetCapture
ReleaseCapture
PtInRect
SetCapture
GetParent
KillTimer
SendMessageA
ShowWindow
MoveWindow
IsDialogMessageA
GetSysColor
OffsetRect
SetTimer
IsWindow
IsWindowUnicode
MessageBoxA
gdi32
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
SetTextColor
DeleteObject
GetDeviceCaps
CreateSolidBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32A
SetPixel
CreatePen
GetCurrentObject
GetObjectA
CreateDIBitmap
GetTextExtentPointA
BitBlt
comdlg32
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
comctl32
ord17
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ