Static task
static1
Behavioral task
behavioral1
Sample
ed5ffb7b14c4a5a28c27f3ec15d6775d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed5ffb7b14c4a5a28c27f3ec15d6775d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed5ffb7b14c4a5a28c27f3ec15d6775d_JaffaCakes118
-
Size
1.5MB
-
MD5
ed5ffb7b14c4a5a28c27f3ec15d6775d
-
SHA1
89a1abddb8125fdde0c503fc6afee22d965578c7
-
SHA256
062df91e8fa40ad27110e83034a73b58935d8e44a7392512d5a8acee83ead59b
-
SHA512
7352f1f723a2ec45bba1de19a3d7f75f49d085ffa74708ae5ad5b78dff9c3ad7c300672f5eb9519b517ed3bb91aabe80c5ea43ba4167afe6e97c942714bb4e8d
-
SSDEEP
6144:kJZbh8PckhCLk5Z02cx9tHNQ/S5JnzN0OvHN0YjewI/MC4XPdQQrRPt:OAcdh2Kr/j3JtCCPdPrRPt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed5ffb7b14c4a5a28c27f3ec15d6775d_JaffaCakes118
Files
-
ed5ffb7b14c4a5a28c27f3ec15d6775d_JaffaCakes118.exe windows:5 windows x86 arch:x86
7d0637a78d0f93efa6dd519de3fdab19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msacm32
acmMetrics
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
__setusermatherr
memset
kernel32
GetTickCount
ExitProcess
EnterCriticalSection
CopyFileW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
IsValidCodePage
GetStartupInfoA
GetModuleHandleA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetErrorMode
GetCommandLineA
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
user32
EmptyClipboard
DestroyCursor
DispatchMessageW
DrawTextExW
DrawStateW
DrawIconEx
GetKeyState
gdi32
FrameRgn
SetTextJustification
SetTextColor
SetBkMode
SetBkColor
SelectObject
RectVisible
PtVisible
MoveToEx
LineTo
GetTextMetricsW
GetTextExtentPoint32W
GetStockObject
GetObjectW
GetDeviceCaps
GetCurrentObject
DeleteObject
FillRgn
ExtTextOutW
Escape
DeleteDC
CreateSolidBrush
CreateFontW
CreatePen
CreatePolygonRgn
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
winspool.drv
OpenPrinterW
EnumPrintersW
advapi32
RegQueryMultipleValuesA
RegLoadKeyW
RegGetKeySecurity
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
GetTokenInformation
FreeSid
EqualSid
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegOpenKeyA
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetKeySecurity
RegSetValueExW
RegUnLoadKeyW
ole32
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
Sections
.text Size: 424KB - Virtual size: 422KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ifx Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ