Static task
static1
Behavioral task
behavioral1
Sample
e74a10c02f9052833ea495d26e203a24_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e74a10c02f9052833ea495d26e203a24_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e74a10c02f9052833ea495d26e203a24_JaffaCakes118
-
Size
408KB
-
MD5
e74a10c02f9052833ea495d26e203a24
-
SHA1
b10cb143b229e452d261b28d6f65baca6bafa963
-
SHA256
e3aff28c2a4d39bd47f564df2a1d59c528dc34b42bf914c0420e7631f50c720f
-
SHA512
c8b04ad432331d0b5dd1a53fa903a567b11db9b36d21219b41287c3fc225a91fdefb66bf7a9f011acf45c510e5e3f45c489859cc7966369f77079e928fc3851b
-
SSDEEP
12288:RZQNYs+YU0gB9lpCK/lsFKp99PBEhgpTaaE9:8hU0gB9bCKNsFKcSaaE9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e74a10c02f9052833ea495d26e203a24_JaffaCakes118
Files
-
e74a10c02f9052833ea495d26e203a24_JaffaCakes118.exe windows:4 windows x86 arch:x86
ffa841106ecf39b06cf0fd9ba84748ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
advapi32
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
kernel32
FindResourceA
Sleep
VirtualFree
FindResourceW
UnmapViewOfFile
WideCharToMultiByte
CreateProcessA
SizeofResource
InterlockedExchange
GetModuleHandleW
GetACP
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCommandLineA
SetStdHandle
HeapSize
GetCurrentDirectoryA
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalUnlock
LCMapStringA
GetConsoleCP
HeapCreate
VirtualAlloc
GetLastError
InterlockedIncrement
CreateFileA
TlsSetValue
CreateEventA
CreateFileW
FindFirstFileW
GetDiskFreeSpaceA
FindFirstFileA
GetProcessHeap
GetSystemInfo
GetProcAddress
GetEnvironmentVariableA
DeleteFileA
GetFileSize
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
GetLocalTime
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
HeapAlloc
LCMapStringW
GetModuleFileNameW
TlsGetValue
SetLastError
InterlockedDecrement
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetCPInfo
FreeEnvironmentStringsW
lstrcatA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
GetDriveTypeA
WaitForSingleObject
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetUserDefaultLCID
GetUserDefaultLangID
GetCurrentThread
GetSystemDefaultLCID
GetSystemDefaultLangID
GetVersion
lstrlenA
IsDebuggerPresent
user32
LoadCursorA
GetDlgItem
SetWindowTextA
SetWindowLongA
SetCapture
DefWindowProcA
BeginPaint
DispatchMessageA
CreateWindowExA
GetWindowLongA
RegisterClassA
LoadStringA
LoadIconA
PeekMessageA
EnableWindow
ShowWindow
GetParent
MsgWaitForMultipleObjects
GetClientRect
SendMessageA
TranslateMessage
ReleaseDC
GetDC
SetWindowPos
IsWindowEnabled
TrackPopupMenu
EndDialog
DialogBoxParamA
SystemParametersInfoA
InvalidateRect
CallWindowProcA
oleaut32
SysStringLen
gdi32
DeleteObject
GetDeviceCaps
DeleteDC
BitBlt
msvcrt
_cexit
_exit
_controlfp
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 356KB - Virtual size: 355KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ