Static task
static1
Behavioral task
behavioral1
Sample
f6dc7074012e98048d8397c5dfd1e163_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f6dc7074012e98048d8397c5dfd1e163_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f6dc7074012e98048d8397c5dfd1e163_JaffaCakes118
-
Size
596KB
-
MD5
f6dc7074012e98048d8397c5dfd1e163
-
SHA1
01e9105539c18e0fa256ac2ab2a6413cc5af48f3
-
SHA256
deb48ba5149484a25d40ac03730c35d85e06cff19001449bbcc4a74d5db44ae8
-
SHA512
8a94b1d1b6fa48d7df95283a7d638cd74acc199b53047511ee0e9167185bc064c1850c28b81bc98c30baff8c5208e48e7ee22d66a87569b318cb786b3dfb88ca
-
SSDEEP
12288:yDVFvMck9OE1kBMhIGwWPYwTuuIwPae/6ELGsPd4KVp7WP+5:yDVFvygE1cMhIGwWPZTuuIV2G+dTP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6dc7074012e98048d8397c5dfd1e163_JaffaCakes118
Files
-
f6dc7074012e98048d8397c5dfd1e163_JaffaCakes118.exe windows:4 windows x86 arch:x86
437c04651410ace90ccc0134f35c91c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetCursorPos
ToUnicodeEx
LoadStringW
DestroyAcceleratorTable
SwitchDesktop
DdeCreateStringHandleW
RegisterClassExA
MessageBoxW
GetForegroundWindow
RegisterDeviceNotificationA
CreateWindowStationA
SetProcessWindowStation
LoadKeyboardLayoutA
SetWindowWord
DialogBoxIndirectParamA
DestroyIcon
ShowWindow
GetDlgItemTextA
RegisterClassA
DefWindowProcA
SetRect
SetDlgItemInt
GetDoubleClickTime
CharUpperW
GetMenuInfo
CreateWindowExA
GetScrollRange
DestroyWindow
FindWindowExW
CreateDialogIndirectParamA
kernel32
FreeEnvironmentStringsA
GlobalReAlloc
CompareStringW
GetFileType
GetTimeZoneInformation
LoadLibraryA
VirtualAlloc
UnhandledExceptionFilter
HeapSize
GetCPInfo
GetModuleHandleA
CreateMutexA
GetCurrentProcessId
Sleep
SetEnvironmentVariableA
IsDebuggerPresent
GetModuleFileNameA
VirtualFree
IsValidCodePage
CreateFileA
GetCurrentThreadId
GetLastError
GetTickCount
InterlockedDecrement
EnumSystemLocalesA
GetStdHandle
RtlUnwind
SetUnhandledExceptionFilter
SetHandleCount
GetCurrentThread
MultiByteToWideChar
GetStringTypeW
FreeLibraryAndExitThread
GetSystemTimeAsFileTime
WriteConsoleA
WriteFile
EnterCriticalSection
ReadConsoleInputW
WaitForMultipleObjectsEx
GetEnvironmentStrings
GetProcessHeap
WriteConsoleW
ReadFile
GetCurrentProcess
GetDriveTypeW
FreeLibrary
OpenMutexW
FreeEnvironmentStringsW
GetDateFormatA
InterlockedIncrement
GetStartupInfoA
InitializeCriticalSectionAndSpinCount
SetFilePointer
DeleteCriticalSection
CloseHandle
GetACP
ExitProcess
SetStdHandle
TlsFree
CompareStringA
GetUserDefaultLCID
GetCurrencyFormatA
IsValidLocale
SystemTimeToTzSpecificLocalTime
GetOEMCP
VirtualQueryEx
SetLastError
TlsAlloc
LeaveCriticalSection
HeapFree
GetConsoleCP
WideCharToMultiByte
GetVersionExA
LCMapStringW
FlushFileBuffers
GetConsoleOutputCP
HeapDestroy
GetEnvironmentStringsW
HeapCreate
GetLocaleInfoW
HeapAlloc
QueryPerformanceCounter
GetTimeFormatA
OpenMutexA
GetConsoleMode
GetProcAddress
GetLocaleInfoA
TerminateProcess
InterlockedExchange
SetTimeZoneInformation
InitializeCriticalSection
VirtualQuery
TlsGetValue
GetCommandLineA
EnumSystemCodePagesA
SetConsoleCtrlHandler
FindFirstFileExA
HeapReAlloc
TlsSetValue
GetStringTypeA
LCMapStringA
comctl32
ImageList_EndDrag
InitCommonControlsEx
MakeDragList
ImageList_SetOverlayImage
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_Replace
ImageList_SetIconSize
ImageList_ReplaceIcon
CreateStatusWindowA
CreateToolbar
CreatePropertySheetPage
ImageList_Merge
DrawStatusText
ImageList_Draw
ImageList_GetImageRect
ImageList_LoadImageW
ImageList_GetDragImage
wininet
InternetTimeToSystemTimeA
GopherGetLocatorTypeW
UnlockUrlCacheEntryStream
InternetSetDialStateW
ResumeSuspendedDownload
Sections
.text Size: 204KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ