Static task
static1
Behavioral task
behavioral1
Sample
e8c484f3d1937a71a5f9c2861c3f3514_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8c484f3d1937a71a5f9c2861c3f3514_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e8c484f3d1937a71a5f9c2861c3f3514_JaffaCakes118
-
Size
512KB
-
MD5
e8c484f3d1937a71a5f9c2861c3f3514
-
SHA1
4a513ad9df61da7761bf6b7f6e5cb8ab338c5b8a
-
SHA256
cb711dc61b08a49c6b9c1d858738e8f0670ee17343a48e53b7a39684b1ebf5fe
-
SHA512
5acb07faa891384e2a2c2548a48fbbe8809410d2f0da055e6f2520afa8d101bcef9358e8052e5a87c35022af148d98f471be9cbfd3e56dbb25fa4bcb0539655a
-
SSDEEP
12288:zLldyspOtTV93T3CWrugJcqf4UjmHGxxedMdr+j6mb5gxaVJ8kwEck:zLlosmPLCgfwKmHGxxmFlmawkwzk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e8c484f3d1937a71a5f9c2861c3f3514_JaffaCakes118
Files
-
e8c484f3d1937a71a5f9c2861c3f3514_JaffaCakes118.exe windows:4 windows x86 arch:x86
596f6997c2700007541fa608cbb6df36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
GetEnvironmentStrings
CreateProcessW
RemoveDirectoryA
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GetModuleHandleW
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
LoadLibraryExW
GetLastError
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GetProcAddress
WaitForMultipleObjects
FindNextFileA
CreateFileMappingA
ResetEvent
CompareStringA
GetDiskFreeSpaceA
FindNextFileW
CompareStringW
GetProcessHeap
GlobalLock
DeleteFileW
SetErrorMode
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
WriteConsoleW
GetCurrentThreadId
SetEndOfFile
MapViewOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
GetLocalTime
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
lstrlenW
InitializeCriticalSection
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
GetEnvironmentVariableA
FormatMessageW
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WaitForSingleObject
InterlockedExchange
GetStringTypeA
lstrcmpiA
WideCharToMultiByte
GetTempPathA
FreeEnvironmentStringsW
InterlockedIncrement
CreateFileA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentDirectoryA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapFree
HeapDestroy
FindFirstFileW
SetEvent
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
TlsFree
SetFilePointer
ReadFile
FindFirstFileA
CloseHandle
lstrcpynA
GetACP
GetVersion
SetStdHandle
SizeofResource
CreateProcessA
IsValidCodePage
HeapCreate
WriteFile
VirtualFree
Sleep
CreateEventW
VirtualAlloc
oleaut32
VariantClear
SysAllocStringLen
advapi32
RegOpenKeyExA
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegDeleteKeyA
RegCreateKeyExW
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
gdi32
GetDeviceCaps
GetStockObject
CreateCompatibleDC
SelectObject
DeleteDC
SetBkColor
BitBlt
CreateSolidBrush
user32
ClientToScreen
GetDlgItem
SetTimer
wsprintfA
EndDialog
SetWindowLongA
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
MapWindowPoints
PtInRect
DispatchMessageA
SetDlgItemTextA
CreateWindowExA
GetWindowLongA
RegisterClassA
IsIconic
LoadStringA
TranslateMessage
LoadCursorA
ShowWindow
UpdateWindow
GetParent
DestroyWindow
GetClientRect
ReleaseDC
GetCursorPos
GetDC
PeekMessageA
IsWindow
SetWindowPos
PostQuitMessage
MessageBoxA
GetSysColor
EnableMenuItem
IsWindowVisible
GetFocus
InvalidateRect
SendMessageA
CallWindowProcA
SetCursor
GetDesktopWindow
EnableWindow
SetForegroundWindow
FillRect
msvcrt
_strcmpi
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_controlfp
Sections
.text Size: 311KB - Virtual size: 311KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ