Static task
static1
Behavioral task
behavioral1
Sample
e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118
-
Size
183KB
-
MD5
e836a0adf53ca83f190e8fae79ad1861
-
SHA1
3af8d274e9d011440c4618184418f33fd948e24f
-
SHA256
3a7a2543a4242fa18729f5d545bf7c7d26402e2841f223e28ebde4c6c25afa66
-
SHA512
838557867402bf5d9dcd2246909741200586670a93a06cef891ab4c6c7c37fdacefffe49206d0a15a151262ee935fb4ef9b2f436e1994649492a61b71c29a25f
-
SSDEEP
3072:JQsKAJNkpkWIj2E9Qjq6F9HTYoh8GNZTgZ0oQB/9Tp7xAgZX7i39hXMb0/DtI7sV:asKeGJI2EOqQTv8GN5mQ3p7t7ibXMwef
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118
Files
-
e836a0adf53ca83f190e8fae79ad1861_JaffaCakes118.exe windows:4 windows x86 arch:x86
2157ab46dac793b11132f6bfe1de5395
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteA
kernel32
GetVersionExA
GetLastError
SetEvent
GetVersionExW
LoadLibraryExA
CreateEventW
CloseHandle
GetProcAddress
LoadLibraryA
GetModuleFileNameA
FreeLibrary
GetSystemDirectoryW
LoadLibraryW
GetTickCount
OpenMutexA
GetCurrentProcessId
CreateMutexW
SetFilePointer
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
WriteFile
CreateFileW
GetLocalTime
GetCurrentThreadId
ReleaseMutex
GetCurrentProcess
GetCommandLineW
FlushFileBuffers
CreateFileA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LCMapStringA
LCMapStringW
Sleep
HeapSize
ExitProcess
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
VirtualQuery
advapi32
RegCreateKeyA
RegCloseKey
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteKeyA
user32
MoveWindow
InvalidateRect
ShowWindow
DestroyWindow
DefWindowProcA
LoadStringA
LoadStringW
GetWindowRect
CreateDialogParamA
GetDesktopWindow
MessageBoxA
GetActiveWindow
wsprintfA
SetFocus
GetDlgItem
SetWindowLongA
LoadImageA
DialogBoxParamA
GetWindowLongA
SendDlgItemMessageA
EndDialog
gdi32
DeleteObject
ole32
CoFreeUnusedLibraries
CoQueryProxyBlanket
CoInitialize
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ