Static task
static1
Behavioral task
behavioral1
Sample
f3db4b4b5df020607fd217c95c936e5c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3db4b4b5df020607fd217c95c936e5c_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f3db4b4b5df020607fd217c95c936e5c_JaffaCakes118
-
Size
378KB
-
MD5
f3db4b4b5df020607fd217c95c936e5c
-
SHA1
bfe746482c82a0059af7bd8490caff9b051365c6
-
SHA256
07b4096734ea7366cbe1c27106ab7e9c60ffb91e927bfb4cf8cbc43814e72f37
-
SHA512
d60c31a789dc28365487603e9cd23a61295bcaed5ee366cebde8c92c241187da7ec3f58019b20bbc5b4ca79d53ed0c0b5997e90ffc572d3c598ac37a36e184eb
-
SSDEEP
6144:5/TnxW2shU5pZiEDZ5wjeul9nIWWCMBA0eX4W53BY3R5YCqM9RFacdlES4:5/FPPpcmGeul9IWhMBAfoW53BY3V9Da7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3db4b4b5df020607fd217c95c936e5c_JaffaCakes118
Files
-
f3db4b4b5df020607fd217c95c936e5c_JaffaCakes118.exe windows:7 windows x86 arch:x86
082667005371e462255292e79957348e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
wcscat
wcschr
free
iswspace
_wtoi
vswprintf
__CxxFrameHandler
malloc
_initterm
iswdigit
wcscpy
wcscmp
_adjust_fdiv
__p__fmode
_c_exit
_callnewh
apphelp
SdbReadEntryInformation
SdbFindFirstMsiPackage_Str
SdbInitDatabase
ApphelpCheckRunApp
SdbFindFirstTag
ApphelpFreeFileAttributes
SdbGetStandardDatabaseGUID
ApphelpUpdateCacheEntry
ApphelpCheckInstallShieldPackage
ShimFlushCache
SdbOpenApphelpDetailsDatabaseSP
SdbOpenDatabase
SdbOpenApphelpInformation
ApphelpGetFileAttributes
SdbReadStringTag
SdbQueryApphelpInformation
ApphelpCheckIME
SdbReadDWORDTag
SdbQueryData
SdbReadBYTETag
SdbReadBYTETagRef
kernel32
VirtualFree
GlobalUnlock
HeapCreate
CloseHandle
LoadLibraryA
VirtualAlloc
IsBadStringPtrW
IsBadWritePtr
HeapFree
Sleep
AddAtomW
GetProcAddress
VirtualFree
SetCurrentDirectoryW
DeleteAtom
OutputDebugStringA
GetStartupInfoW
HeapQueryInformation
HeapDestroy
GetTickCount
FlushInstructionCache
HeapSetInformation
GetCurrentThreadId
WideCharToMultiByte
EnterCriticalSection
shell32
SHOpenPropSheetW
SHGetDataFromIDListW
SHReplaceFromPropSheetExtArray
SHGetNewLinkInfoW
SHQueryRecycleBinA
SHPropStgCreate
SHGetFileInfoW
SHGetDiskFreeSpaceExW
SHLoadInProc
SHGetAttributesFromDataObject
SHGetUnreadMailCountW
user32
CopyRect
SetWindowLongW
GetSysColor
MessageBeep
EnumChildWindows
GetCapture
LoadAcceleratorsW
InvalidateRgn
GetDlgItem
GetForegroundWindow
InsertMenuW
InflateRect
GetMenuItemCount
GetFocus
GetSubMenu
LoadMenuW
TabbedTextOutW
CallWindowProcW
SetParent
DispatchMessageW
SetRectEmpty
ReleaseDC
DeleteMenu
EnableWindow
CopyImage
GetMenuStringW
GetCursorPos
TrackPopupMenuEx
ClientToScreen
IsWindow
MessageBoxW
DefWindowProcW
GetMenu
GetMenuItemInfoW
GetSysColorBrush
CallNextHookEx
ShowWindow
GetIconInfo
CreateWindowExW
InvalidateRect
RegisterClassExW
GetClientRect
rtutils
RouterLogEventExA
TraceRegisterExA
MprSetupProtocolEnum
TraceDumpExA
TraceDeregisterW
TracePrintfW
LogEventA
TracePrintfA
glu32
gluNurbsProperty
gluPwlCurve
gluNewQuadric
gluNurbsSurface
gluTessBeginPolygon
gluBuild2DMipmaps
gluEndTrim
gluNextContour
gluDeleteNurbsRenderer
gdi32
CreateCompatibleBitmap
GetTextExtentPoint32W
DeleteObject
CreateSolidBrush
RectVisible
CreateCompatibleDC
CreatePolygonRgn
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ