Static task
static1
Behavioral task
behavioral1
Sample
f718dd8bbb8efa452a883dbe0f237ba1_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f718dd8bbb8efa452a883dbe0f237ba1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f718dd8bbb8efa452a883dbe0f237ba1_JaffaCakes118
-
Size
533KB
-
MD5
f718dd8bbb8efa452a883dbe0f237ba1
-
SHA1
b678fce8512c09116ff0e78ddab908f2a0fb9198
-
SHA256
0857d4d1dfc7f1265ca3d661fd2d4768bb13774d0439e340f4fb28b32c96a262
-
SHA512
64b10884d7f7cfc3cb456db5620e650fa47e7769192fbc7f07944e226145542b9a3802ccee894a5135d99c482a473a4da96665b8ae6ef1102d3f7a86d5326eed
-
SSDEEP
12288:sw2CJcmJ9XD8OMfr6MoYXYeurxCg7cC5317R2R5i:BRJfKeMosYtrzce7k5i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f718dd8bbb8efa452a883dbe0f237ba1_JaffaCakes118
Files
-
f718dd8bbb8efa452a883dbe0f237ba1_JaffaCakes118.exe windows:4 windows x86 arch:x86
12cf377b0e73a68cb2ac881e42d3e6f9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
DeleteIE3Cache
DeleteUrlCacheEntry
FtpSetCurrentDirectoryW
InternetTimeFromSystemTimeA
GetUrlCacheHeaderData
InternetAttemptConnect
InternetLockRequestFile
advapi32
CryptSetHashParam
RegQueryInfoKeyA
RegSaveKeyW
RegEnumKeyW
LookupSecurityDescriptorPartsW
CryptContextAddRef
AbortSystemShutdownW
CryptGetDefaultProviderA
CryptSetProviderExA
LookupPrivilegeDisplayNameW
LookupAccountSidW
LookupPrivilegeValueA
ReportEventW
CryptHashSessionKey
RegReplaceKeyA
RegRestoreKeyA
RegQueryValueExA
StartServiceA
LookupPrivilegeNameA
CryptHashData
CryptDuplicateHash
RegOpenKeyA
CryptSignHashA
user32
LoadBitmapW
RegisterClassExA
DeleteMenu
RegisterClassA
SetForegroundWindow
EndDeferWindowPos
GetKeyboardLayoutNameA
GetParent
shell32
SHGetDiskFreeSpaceA
CommandLineToArgvW
SHLoadInProc
SHGetDataFromIDListA
ShellExecuteExA
kernel32
SetFilePointer
GetCurrentProcess
WideCharToMultiByte
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetConsoleMode
SetConsoleCtrlHandler
GetCurrentThread
GetLocaleInfoA
HeapAlloc
IsDebuggerPresent
ExitProcess
WriteFile
IsValidLocale
GetConsoleOutputCP
SetLastError
GetStringTypeExW
LoadLibraryA
GetModuleFileNameW
GetUserDefaultLCID
GetEnvironmentStringsW
FreeLibrary
SetUnhandledExceptionFilter
LCMapStringA
GetProcAddress
WriteConsoleA
IsValidCodePage
GetCPInfo
MultiByteToWideChar
GetDateFormatA
TerminateProcess
WriteConsoleW
UnhandledExceptionFilter
GetCommandLineA
GetStdHandle
DeleteCriticalSection
VirtualFree
EnterCriticalSection
CompareStringW
HeapDestroy
GetConsoleCP
HeapFree
HeapReAlloc
GetACP
Sleep
GetStringTypeW
GetSystemTimeAsFileTime
GetModuleHandleW
CreateMutexA
GetFileType
OpenMutexA
TlsAlloc
InterlockedExchange
GetModuleFileNameA
InterlockedDecrement
GetModuleHandleA
RtlUnwind
CloseHandle
SetHandleCount
GetTickCount
TlsSetValue
InterlockedIncrement
CompareStringA
GetCurrentProcessId
QueryPerformanceCounter
VirtualQuery
GetStartupInfoW
SetEnvironmentVariableA
EnumSystemLocalesA
GetCommandLineW
GetStringTypeA
LCMapStringW
HeapCreate
CreateFileA
GetLastError
FlushFileBuffers
TlsGetValue
GetTimeFormatA
GetOEMCP
GetStartupInfoA
TlsFree
GetCurrentThreadId
SetStdHandle
VirtualAlloc
LeaveCriticalSection
FreeEnvironmentStringsW
ReadFile
lstrlen
HeapSize
GetLocaleInfoW
comctl32
InitCommonControlsEx
comdlg32
PrintDlgA
Sections
.text Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ