Static task
static1
Behavioral task
behavioral1
Sample
f73039d6af747696dd7e7c3f4eb577e8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f73039d6af747696dd7e7c3f4eb577e8_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f73039d6af747696dd7e7c3f4eb577e8_JaffaCakes118
-
Size
304KB
-
MD5
f73039d6af747696dd7e7c3f4eb577e8
-
SHA1
af7b6e7f86d158c6d8cdaea6a368445c9437f59c
-
SHA256
e42de3a16ae5429a645a10bf3e3ca3fe7ed0ec957bcbe91de34f80a68b0be872
-
SHA512
b41dabcf82422c78962611d4bfb2d2e3b9b19f4f5c44c7e952adb35c3e79f18efb78a0a35156e8df4bc0a13d5fa56b48407645fd9d6b2cdf5169a506d829eba5
-
SSDEEP
6144:AAH7zl9F61uxTjHZkfjAwu+CJH6Wi4q8PFbKp+uoszs+TMgYnc:tbzjF61OD8a+ej48PF+os9TMN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f73039d6af747696dd7e7c3f4eb577e8_JaffaCakes118
Files
-
f73039d6af747696dd7e7c3f4eb577e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
ef1d5fb8d27f215dc9ef190dbc459fe0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragQueryPoint
FindExecutableA
SHGetDiskFreeSpaceA
comdlg32
GetOpenFileNameW
user32
VkKeyScanExW
ShowWindow
GetClassInfoW
EnumDesktopsW
CreateMenu
GetWindowTextLengthW
GetClipboardFormatNameA
DdePostAdvise
LoadBitmapA
EnumPropsW
GetMenuStringA
DrawCaption
GetMonitorInfoW
TranslateAcceleratorW
UnhookWinEvent
SetMessageExtraInfo
kernel32
GetEnvironmentVariableA
CreateWaitableTimerA
ResetEvent
CreateFileW
GetEnvironmentStringsW
GetCurrentThreadId
IsValidCodePage
TlsSetValue
GetLocaleInfoW
EnumResourceLanguagesA
EnumDateFormatsExA
GetExitCodeThread
GetSystemTimeAsFileTime
CreateDirectoryExW
GetEnvironmentStrings
RtlUnwind
GetStringTypeA
VirtualQuery
GlobalHandle
VirtualFree
SetHandleCount
GetUserDefaultLCID
FoldStringA
GetProcAddress
GetVersionExA
IsValidLocale
GetCurrentThread
GetModuleHandleA
CompareStringA
FindFirstFileW
GetDateFormatA
EnterCriticalSection
ReadConsoleInputW
FreeEnvironmentStringsW
GetCPInfo
TlsAlloc
GetTimeFormatA
GetFileType
SetEnvironmentVariableA
TlsGetValue
SetLastError
GetStartupInfoW
GetTimeZoneInformation
LoadLibraryA
CompareStringW
HeapReAlloc
UnhandledExceptionFilter
InitializeCriticalSection
EnumSystemLocalesA
SetFileAttributesA
HeapFree
GetCommandLineW
IsBadWritePtr
GetACP
WriteFile
TerminateProcess
GetStdHandle
ConvertDefaultLocale
GetSystemInfo
FreeEnvironmentStringsA
QueryPerformanceCounter
MultiByteToWideChar
GetCurrentProcessId
GetCommandLineA
GetLocaleInfoA
LeaveCriticalSection
AddAtomA
GetStartupInfoA
GetLastError
WideCharToMultiByte
DeleteCriticalSection
TlsFree
EnumDateFormatsW
HeapDestroy
ExitProcess
LCMapStringW
CreateFileMappingA
LCMapStringA
GetStringTypeW
GetModuleFileNameW
GetTickCount
HeapCreate
SetFileAttributesW
GetCurrentProcess
VirtualProtect
InterlockedExchange
GetOEMCP
VirtualAlloc
HeapSize
GetModuleFileNameA
HeapAlloc
advapi32
CryptDuplicateHash
RegQueryMultipleValuesW
CryptSetProviderExW
CryptSetProviderExA
RegEnumValueW
LookupPrivilegeValueA
LookupPrivilegeNameA
CryptGetHashParam
DuplicateToken
RegEnumKeyExA
CryptAcquireContextW
RegDeleteValueA
InitiateSystemShutdownW
CryptDecrypt
GetUserNameW
CryptEnumProviderTypesW
CryptVerifySignatureA
RegReplaceKeyA
LookupAccountSidW
InitiateSystemShutdownA
CryptGetDefaultProviderW
RegCreateKeyA
CryptVerifySignatureW
gdi32
CreatePen
CreateEllipticRgn
GetTextExtentPointA
AbortPath
SetICMProfileW
StretchBlt
GetMetaFileA
AddFontResourceW
GetPath
ResetDCA
CreateMetaFileW
ExtCreatePen
SetBitmapBits
GetAspectRatioFilterEx
PolyPolyline
TranslateCharsetInfo
GetPixel
UpdateICMRegKeyW
GetROP2
CopyEnhMetaFileW
PlayEnhMetaFile
Rectangle
DeleteEnhMetaFile
CreateMetaFileA
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ