Static task
static1
Behavioral task
behavioral1
Sample
e89a27b643943a2e0c4769cc754060f4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e89a27b643943a2e0c4769cc754060f4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e89a27b643943a2e0c4769cc754060f4_JaffaCakes118
-
Size
308KB
-
MD5
e89a27b643943a2e0c4769cc754060f4
-
SHA1
180661d90ea55bbb468e95df580e4004a3073ec3
-
SHA256
5c7957a9c11ca8b4bf7a37ac64a985c9f90413b764dacce27b2d24eb2bd9d869
-
SHA512
8886db4d124ac7bc58ed5506cae6758682eb17deafd6556bad61d186b9988c6685753008d21dead3fe6ecad3c9a358e69968c426c0aed89164021086e983ef45
-
SSDEEP
6144:gJt8AfiBDC6G0DBXldj88F0z4+F0jI/YRtgMy9JRy/K:gJvfiS2TdFVjmGgMyfRMK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e89a27b643943a2e0c4769cc754060f4_JaffaCakes118
Files
-
e89a27b643943a2e0c4769cc754060f4_JaffaCakes118.exe windows:4 windows x86 arch:x86
46b35eab754a660edc0cc7986c8e76b4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Toolhelp32ReadProcessMemory
ClearCommBreak
ReadConsoleOutputAttribute
GetTickCount
GlobalHandle
ConnectNamedPipe
GetModuleFileNameA
ReadConsoleInputA
SetHandleInformation
lstrcmpiA
GetDevicePowerState
MoveFileWithProgressA
ExitVDM
ClearCommError
GetConsoleCursorMode
LoadModule
HeapQueryInformation
GetThreadContext
WaitCommEvent
OpenEventA
WriteProcessMemory
GetDiskFreeSpaceA
WriteConsoleOutputA
ReadConsoleOutputA
SetCurrentDirectoryA
OutputDebugStringA
GetExitCodeThread
OpenProcess
ReadConsoleOutputCharacterA
DuplicateHandle
GetDateFormatA
CreateNamedPipeA
GetProfileStringA
EnumSystemLanguageGroupsA
SetFileAttributesA
OpenMutexA
CreatePipe
OpenWaitableTimerA
LoadLibraryExA
OpenThread
EnumSystemGeoID
SetInformationJobObject
Heap32ListFirst
VerifyVersionInfoA
LoadLibraryA
SetThreadContext
SetFirmwareEnvironmentVariableA
LocalReAlloc
Heap32ListNext
IsBadWritePtr
IsBadCodePtr
GetThreadLocale
GetSystemTime
GetProcessPriorityBoost
SetStdHandle
VirtualFree
EndUpdateResourceA
VirtualAllocEx
GetComputerNameA
GetProcessWorkingSetSize
GetVersionExA
DeleteTimerQueueEx
MultiByteToWideChar
GetStringTypeExW
GetThreadIOPendingFlag
GetLocaleInfoA
IsBadStringPtrA
WriteConsoleOutputA
QueryPerformanceFrequency
GetConsoleAliasesA
GetProcessVersion
GetProfileSectionA
GetFileSizeEx
GetFileAttributesExA
GetProcessShutdownParameters
GetDriveTypeA
FlushFileBuffers
GetFileTime
GetExitCodeProcess
SetDefaultCommConfigA
GetVolumeNameForVolumeMountPointA
SizeofResource
SetVolumeMountPointA
OpenFileMappingA
GetVolumePathNameA
MoveFileA
SetPriorityClass
GetProcessHandleCount
GetThreadPriority
ProcessIdToSessionId
GetProfileSectionA
GetLogicalDriveStringsA
SetCurrentDirectoryA
GetConsoleInputWaitHandle
GetProfileSectionA
CommConfigDialogA
GetPrivateProfileStringA
lstrcpyA
GetFileAttributesExA
LCMapStringA
GetConsoleTitleA
GetFullPathNameA
MapViewOfFile
RemoveDirectoryA
GetSystemTime
GetLogicalDrives
SetEndOfFile
SetConsoleInputExeNameA
GlobalWire
IsValidCodePage
GetConsoleScreenBufferInfo
OpenWaitableTimerA
OutputDebugStringA
SystemTimeToFileTime
GetModuleHandleA
SetDllDirectoryA
GetFileSize
GetLongPathNameA
GetCommandLineA
IsBadReadPtr
FindAtomA
GetTickCount
GetEnvironmentVariableA
GetBinaryType
ExpandEnvironmentStringsA
ReadConsoleA
GetDllDirectoryA
GetTapeStatus
PeekConsoleInputA
GetProcessShutdownParameters
WriteConsoleOutputAttribute
GetProcessHeap
GetComputerNameExA
CancelWaitableTimer
ReleaseMutex
GetUserDefaultLCID
GetThreadPriority
GlobalAddAtomA
Heap32ListNext
WriteConsoleInputA
GetProcessTimes
HeapFree
LCMapStringA
WriteConsoleA
GetProcessId
GetProcessTimes
WriteConsoleOutputCharacterA
GetPrivateProfileStructA
GetFileInformationByHandle
CloseHandle
DebugBreak
ReadConsoleA
GetThreadPriority
FlushViewOfFile
RemoveDirectoryA
ReadConsoleOutputCharacterA
GetVDMCurrentDirectories
GetSystemWindowsDirectoryA
RequestWakeupLatency
HeapSummary
GetTimeFormatA
CreateSemaphoreA
GetProcessHandleCount
SignalObjectAndWait
SetMessageWaitingIndicator
WriteConsoleOutputCharacterA
SetUnhandledExceptionFilter
GetDefaultCommConfigA
SetPriorityClass
lstrlenA
ExpungeConsoleCommandHistoryA
BuildCommDCBAndTimeoutsA
DeleteFileA
user32
GetScrollBarInfo
GetTabbedTextExtentA
BringWindowToTop
PackDDElParam
TrackPopupMenu
SetActiveWindow
SetLastErrorEx
AdjustWindowRectEx
RegisterShellHookWindow
IsWindowUnicode
LoadBitmapA
OpenWindowStationA
SetCaretPos
DestroyCursor
MapWindowPoints
GetRawInputData
TileChildWindows
LoadIconA
TabbedTextOutA
SetRect
GetUpdateRect
CharNextExA
GetCursor
EnumThreadWindows
GetSysColorBrush
SetMenuDefaultItem
ToUnicodeEx
SetWindowsHookExW
SystemParametersInfoA
GetWindowTextA
SetClassWord
ChangeDisplaySettingsExA
SetRect
CharToOemA
DrawCaptionTempA
GetCaretPos
SetProgmanWindow
ChangeDisplaySettingsA
UnregisterDeviceNotification
GetParent
GetClipboardSequenceNumber
DrawTextExA
DrawEdge
AlignRects
EnumDesktopWindows
PaintMenuBar
CreateAcceleratorTableA
SendIMEMessageExA
GetClipboardOwner
DeviceEventWorker
SetWindowPlacement
EndMenu
OpenIcon
GetScrollBarInfo
DrawMenuBar
GetGuiResources
DialogBoxIndirectParamAorW
GetGuiResources
GetKeyNameTextA
RealGetWindowClassA
SetPropA
EnumDesktopsA
GetAncestor
RegisterRawInputDevices
OpenWindowStationA
GetMouseMovePointsEx
EnumPropsExW
EnableMenuItem
SetWindowsHookExW
GetWindowInfo
DrawIconEx
GetRawInputBuffer
IsHungAppWindow
SetRect
ChangeDisplaySettingsExW
DlgDirListComboBoxA
SendMessageA
SendInput
ReplyMessage
SetActiveWindow
EnumDisplaySettingsExA
advapi32
IsValidSid
Sections
.itext Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 180KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ