Static task
static1
Behavioral task
behavioral1
Sample
f66cbea2c50f229d23286f6d9117b4e8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f66cbea2c50f229d23286f6d9117b4e8_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f66cbea2c50f229d23286f6d9117b4e8_JaffaCakes118
-
Size
1.2MB
-
MD5
f66cbea2c50f229d23286f6d9117b4e8
-
SHA1
fccd3545e0fd5ef89dcf8cccdf73733ef60e50f0
-
SHA256
04336f0a335ee82d7dce82af1f7041072d20f362e66410e5ecbb2eabff201f00
-
SHA512
2006d6511c454fb38fef0a22933f0cc60826083d725f142de6b4cac5a52bd14fb0e1e1e1ca5fc9996166e107cefaa74e64fd6aae3c3418db3ade4cd36a67bc94
-
SSDEEP
12288:HYc+UGfyHV/LucCievlzBkB6zLX8+8o2sFwV0lZeSoXHM/bi5QGE3zJUuEZZf5nC:H/+XfyJ9pc/bSQGE3FUTf32suLg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66cbea2c50f229d23286f6d9117b4e8_JaffaCakes118
Files
-
f66cbea2c50f229d23286f6d9117b4e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
1168ce2d5533198b8c43376e97ac4099
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetModuleFileNameA
GetLocalTime
GetProcAddress
GetUserDefaultLangID
GetACP
GetModuleHandleA
GetVersionExA
GetVersion
SizeofResource
GetCommandLineA
WaitForSingleObject
GetWindowsDirectoryA
SetCurrentDirectoryA
CreateProcessA
CreateDirectoryA
SetConsoleTitleA
HeapAlloc
HeapCreate
HeapDestroy
ExitProcess
GetExitCodeProcess
LoadResource
VirtualFree
AllocConsole
GetDiskFreeSpaceA
FreeConsole
SetVolumeLabelA
SetEndOfFile
SetLocalTime
RemoveDirectoryA
FindClose
GetVolumeInformationA
GetLogicalDrives
FindFirstFileA
CopyFileA
MoveFileA
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
GetDriveTypeA
FindNextFileA
LockResource
LoadLibraryA
SetFileAttributesA
SetFilePointer
GetFileAttributesA
SetFileTime
ReadFile
GetFileSize
HeapFree
HeapReAlloc
GetStdHandle
lstrlenA
lstrlenW
CloseHandle
CompareStringA
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
MultiByteToWideChar
HeapSize
VirtualAlloc
WideCharToMultiByte
DeleteFileA
WriteFile
CreateFileA
RaiseException
user32
GetDC
GetCursorPos
PostQuitMessage
DefWindowProcA
ReleaseDC
MessageBoxA
EnableWindow
DestroyWindow
CharToOemBuffA
OemToCharBuffA
IsIconic
EndPaint
BeginPaint
FillRect
SetKeyboardState
GetKeyboardState
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
KillTimer
SetTimer
SetWindowPlacement
GetWindowPlacement
SetCursor
GetSysColor
GetClientRect
ShowWindow
InvalidateRect
IsWindow
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
SetWindowLongA
GetWindowRect
SystemParametersInfoA
SetWindowPos
SetForegroundWindow
GetForegroundWindow
GetSystemMetrics
GetDlgItem
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
CharLowerA
CharUpperA
CreateCursor
DestroyIcon
DestroyCursor
GetWindow
GetWindowLongA
SetFocus
ScreenToClient
GetKeyState
GetAsyncKeyState
ClientToScreen
MoveWindow
SendMessageA
ShowCursor
IsZoomed
EndDialog
DialogBoxParamA
AdjustWindowRectEx
GetClassNameA
UpdateWindow
gdi32
CreatePalette
DeleteObject
CreateSolidBrush
SetBkColor
SetTextColor
StretchDIBits
CreateFontA
GetStockObject
SelectPalette
GetDIBits
TextOutA
DeleteDC
CreateCompatibleDC
CreateBitmap
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
BitBlt
CreateHatchBrush
EnumFontFamiliesA
CreateDCA
SetStretchBltMode
RealizePalette
msacm32
acmStreamOpen
acmFormatSuggest
acmStreamClose
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
winmm
waveOutUnprepareHeader
waveOutWrite
waveOutPrepareHeader
waveOutOpen
waveOutPause
joyGetPos
waveOutRestart
waveOutGetPosition
waveOutReset
waveOutClose
mciSendCommandA
joyGetDevCapsA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
ord6
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ExtractIconA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petprg Size: 977KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ