Static task
static1
Behavioral task
behavioral1
Sample
ed7e35d0db6b17785129da2eed78f36d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed7e35d0db6b17785129da2eed78f36d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ed7e35d0db6b17785129da2eed78f36d_JaffaCakes118
-
Size
510KB
-
MD5
ed7e35d0db6b17785129da2eed78f36d
-
SHA1
3aadd830b4a12b26c22b6012972c61c65297e782
-
SHA256
7fefa38854006a632feef1d8afb20a11eed1eda8f5eee5d47f5e72b6a4dc3c88
-
SHA512
d9914783673946a91e9fe9d498a611185419553be72ff41000b134d29edb0f78e6bcdb2ff731ea577a0cd23d666a87df3e19b12d96e9b25cb0f3cdd406a6eefb
-
SSDEEP
12288:2aVJRCNQ4/AHdz80vSPrOHuw+arUsaDDXrvjKj9kjBjW:7V2NzAHm0g8uw+aVaf77KjYBj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed7e35d0db6b17785129da2eed78f36d_JaffaCakes118
Files
-
ed7e35d0db6b17785129da2eed78f36d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8aff5c8aedec605683bf69d1ee27da4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
FindExecutableW
ExtractIconW
wininet
InternetAttemptConnect
gdi32
CreateCompatibleDC
EnableEUDC
SaveDC
EnumObjects
CreateICW
GetCurrentPositionEx
CreateDCA
GetObjectA
StartDocW
GetTextExtentExPointA
CreateFontA
FrameRgn
Rectangle
GetTextExtentPoint32W
LineTo
CreateDIBSection
PolylineTo
GetClipRgn
UpdateICMRegKeyA
CreateICA
InvertRgn
CreateColorSpaceA
PlayEnhMetaFileRecord
CombineTransform
comdlg32
ChooseColorW
GetSaveFileNameA
comctl32
InitCommonControlsEx
kernel32
GetStringTypeA
CreateMailslotA
IsValidCodePage
GetDateFormatA
GetCompressedFileSizeA
GetTimeFormatA
GetCurrentProcessId
InterlockedExchange
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetUserDefaultLCID
HeapCreate
CreateFileA
CompareStringW
GetFileType
UnhandledExceptionFilter
WideCharToMultiByte
ReadFile
CloseHandle
LCMapStringW
GetModuleHandleA
EnterCriticalSection
GetModuleFileNameW
RtlFillMemory
QueryPerformanceCounter
SetConsoleCtrlHandler
MultiByteToWideChar
GetSystemTimeAsFileTime
DeleteCriticalSection
ReadConsoleOutputW
GetProcAddress
GetCalendarInfoW
GetStartupInfoW
VirtualAlloc
GetOEMCP
InterlockedIncrement
GetLocaleInfoA
HeapDestroy
TerminateProcess
GetStartupInfoA
GetCommandLineW
IsDebuggerPresent
GetStdHandle
TlsAlloc
RtlUnwind
CompareStringA
WriteConsoleW
FreeEnvironmentStringsW
SetFilePointer
GetACP
GetLastError
HeapSize
VirtualFree
OpenMutexA
GetConsoleMode
SetUnhandledExceptionFilter
IsValidLocale
TlsSetValue
LCMapStringA
OpenSemaphoreW
FreeLibrary
GetConsoleCP
GetTimeZoneInformation
GetTickCount
GetCurrentProcess
GetCurrentThreadId
Sleep
TlsGetValue
FoldStringA
GetCommandLineA
HeapAlloc
LeaveCriticalSection
GetCPInfo
TlsFree
SetEnvironmentVariableA
ResetEvent
SetHandleCount
GetStringTypeW
GetCurrentThread
InterlockedDecrement
GetModuleFileNameA
HeapReAlloc
SetStdHandle
WriteFile
GetModuleHandleW
CreateMutexA
GetCalendarInfoA
SetLastError
HeapFree
ExitProcess
VirtualQuery
EnumSystemLocalesA
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
LoadLibraryA
user32
MessageBoxIndirectA
RegisterClassA
UnregisterClassA
DestroyWindow
EmptyClipboard
SetRectEmpty
LookupIconIdFromDirectory
GetThreadDesktop
GetUserObjectInformationA
EnumClipboardFormats
SetClipboardViewer
SetClassWord
RegisterClassExA
CreateCursor
DdeDisconnectList
OpenInputDesktop
CheckDlgButton
EnumChildWindows
SetParent
GetWindowRgn
PtInRect
SetSystemCursor
EnumDesktopsW
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ