Static task
static1
Behavioral task
behavioral1
Sample
f201cc1370800b1810bc96fb9e51d25b_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f201cc1370800b1810bc96fb9e51d25b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f201cc1370800b1810bc96fb9e51d25b_JaffaCakes118
-
Size
647KB
-
MD5
f201cc1370800b1810bc96fb9e51d25b
-
SHA1
f19a701b94ea11dff6ca75c135a509cdf7d77b22
-
SHA256
f99e3642a9a69f57fd0ee23808c5d2a7f300f361bf0fdfacfbee429131f4e38c
-
SHA512
a419c4720b767695f176061a81e6f12f11fbcd6fdf3f0fd40f7fc26e6660700868560757518b30824e975483b2c97f76c2a88ce0b6222ecf998e6b5345166073
-
SSDEEP
12288:/65VM0xHlKEinw8bkQQNL8rEemmmh3JvBRuVDeP9puXZ9UK+BwWn5O3o:C5Vvy9w8gQ0L8womhZThPc9UKs03
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f201cc1370800b1810bc96fb9e51d25b_JaffaCakes118
Files
-
f201cc1370800b1810bc96fb9e51d25b_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ca6de615b525c032715009976f451a1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetDateFormatA
HeapSize
HeapAlloc
CompareStringW
WriteConsoleA
VirtualFree
GetModuleFileNameW
DeleteCriticalSection
ReadConsoleOutputW
HeapReAlloc
SetLastError
GetCPInfo
TerminateProcess
HeapFree
GetStartupInfoW
InterlockedDecrement
GetCommandLineA
GetConsoleCP
GetConsoleOutputCP
VirtualQuery
SetCurrentDirectoryW
SetFilePointer
MultiByteToWideChar
CreateMutexA
LoadLibraryA
GetCurrentThread
GetEnvironmentStringsW
ReadFile
GetSystemTimeAsFileTime
IsValidLocale
GetModuleHandleA
GetStartupInfoA
SetHandleCount
FreeEnvironmentStringsW
DebugActiveProcess
SetPriorityClass
GetLocaleInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
EnumDateFormatsA
OpenMutexA
WritePrivateProfileSectionA
GetUserDefaultLCID
WideCharToMultiByte
GetLocaleInfoW
GetProcessHeap
TlsGetValue
GetTimeZoneInformation
GetAtomNameW
EnumSystemLocalesA
GetCurrentThreadId
AddAtomW
LeaveCriticalSection
LCMapStringA
GetACP
QueryPerformanceCounter
WriteFile
SetStdHandle
WriteConsoleW
CreateFileA
InterlockedExchange
GetVersionExA
GetLastError
UnhandledExceptionFilter
GetCurrentProcess
InterlockedCompareExchange
GetTimeFormatA
GetOEMCP
EnterCriticalSection
GetEnvironmentStrings
FlushFileBuffers
GetProcAddress
IsDebuggerPresent
GetStringTypeA
WriteConsoleInputW
RtlUnwind
TlsAlloc
GetConsoleMode
HeapDestroy
GetCurrentProcessId
CreateDirectoryA
GetCommandLineW
LCMapStringW
Sleep
GetFileType
FreeLibrary
SetConsoleCtrlHandler
SetEnvironmentVariableA
TlsFree
CompareStringA
CloseHandle
GetTickCount
IsValidCodePage
GetFileAttributesExA
HeapCreate
InterlockedIncrement
GetStringTypeW
ExitProcess
InitializeCriticalSection
GetStdHandle
VirtualAlloc
TlsSetValue
comdlg32
GetSaveFileNameW
user32
RemovePropA
RegisterDeviceNotificationW
ToAsciiEx
RegisterWindowMessageW
GetDlgItem
ChangeDisplaySettingsExA
EnumDesktopsW
BringWindowToTop
InternalGetWindowText
DispatchMessageA
ModifyMenuA
EditWndProc
CreateWindowStationW
GetWindowRgn
GetKeyNameTextA
CreateWindowStationA
CharLowerBuffW
GetMenuBarInfo
SetUserObjectInformationA
MsgWaitForMultipleObjectsEx
MessageBoxW
GetKeyboardState
BeginDeferWindowPos
PostMessageA
DdeInitializeA
SetWindowLongW
DrawTextExA
SendNotifyMessageA
InsertMenuItemA
CreateIconFromResource
GetTitleBarInfo
SetWindowPlacement
MapVirtualKeyW
LoadBitmapA
SetScrollPos
LoadStringA
MapWindowPoints
CreateMenu
RegisterClassA
MapVirtualKeyA
SendIMEMessageExW
GetLastActivePopup
GetMessageTime
GetMenuStringW
GetScrollRange
MapVirtualKeyExA
RegisterClassExA
CharPrevExA
SetWindowsHookExA
GetMessageA
comctl32
ImageList_SetFlags
ImageList_LoadImageA
ImageList_SetOverlayImage
CreateStatusWindowA
ImageList_ReplaceIcon
ImageList_Copy
ImageList_AddIcon
ImageList_Draw
ImageList_SetIconSize
ImageList_Duplicate
ImageList_BeginDrag
CreateUpDownControl
ImageList_LoadImage
ImageList_DragMove
DrawStatusTextA
InitCommonControlsEx
ImageList_Read
InitMUILanguage
ImageList_GetIconSize
GetEffectiveClientRect
ImageList_Remove
ImageList_DrawEx
Sections
.text Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ