Static task
static1
Behavioral task
behavioral1
Sample
f4255fbc055569fe680e6ce8bf5e2914_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4255fbc055569fe680e6ce8bf5e2914_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f4255fbc055569fe680e6ce8bf5e2914_JaffaCakes118
-
Size
9.6MB
-
MD5
f4255fbc055569fe680e6ce8bf5e2914
-
SHA1
86a225276cf599d017e939ca2aa47c4f822042c1
-
SHA256
dd8c7318d595d054312e1a3fa293979516b4a31828210ddda9e140e07b83e528
-
SHA512
ba4723764b2fae0ea51a2aa851057d621241f3cd1448395bb96bc33aef389404127088286d1866a8ebbd75411b371bf8af5dcea9e78c0cedce20df149f35f74d
-
SSDEEP
196608:cHNybOs2oNyzMLkkn4qwZrIEHgxSevXIRHQs1fUmRJbG5144bu/rQ73l78:cHIbjA64qBEHu/YRHr1dwi4buL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4255fbc055569fe680e6ce8bf5e2914_JaffaCakes118
Files
-
f4255fbc055569fe680e6ce8bf5e2914_JaffaCakes118.exe windows:4 windows x86 arch:x86
2168924e42703f48f13006228d84cfc2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
LoadResource
SizeofResource
FreeResource
FindResourceA
lstrcatA
lstrlenA
CreateFileA
RtlMoveMemory
ReadFile
WriteFile
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GlobalAlloc
GlobalFree
SetFileAttributesA
DeleteFileA
GetCurrentProcess
GetTempFileNameA
GetWindowsDirectoryA
GetDriveTypeA
GetModuleFileNameA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GetCurrentDirectoryA
CreateProcessA
GetPrivateProfileStringA
GetPrivateProfileIntA
FindClose
FindNextFileA
FindFirstFileA
_lclose
_llseek
_lopen
WaitForSingleObject
GetExitCodeProcess
CloseHandle
lstrcpyA
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
FormatMessageA
LocalAlloc
lstrcmpA
LocalFree
GetVersionExA
CreateThread
TerminateThread
FlushFileBuffers
SetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
RemoveDirectoryA
WideCharToMultiByte
GetStringTypeA
SetStdHandle
HeapAlloc
HeapFree
HeapCreate
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetStdHandle
GetFileType
SetHandleCount
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
LCMapStringW
LCMapStringA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
LeaveCriticalSection
GetStringTypeW
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
user32
DialogBoxParamA
SetWindowLongA
GetWindowLongA
CallWindowProcA
EndDialog
GetDlgItem
SetForegroundWindow
SetWindowTextA
SetDlgItemTextA
GetDesktopWindow
SendDlgItemMessageA
LoadStringA
GetDlgItemTextA
EnableWindow
MsgWaitForMultipleObjects
PeekMessageA
SetWindowPos
ReleaseDC
GetDC
GetWindowRect
CharPrevA
ExitWindowsEx
wsprintfA
CharNextA
ShowWindow
MessageBeep
MessageBoxA
DispatchMessageA
SendMessageA
gdi32
GetDeviceCaps
advapi32
RegDeleteValueA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegQueryInfoKeyA
comctl32
ord17
Sections
.text Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 213B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ