Static task
static1
Behavioral task
behavioral1
Sample
f7271f8b48b06a90590d7f92102e3ebe_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f7271f8b48b06a90590d7f92102e3ebe_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7271f8b48b06a90590d7f92102e3ebe_JaffaCakes118
-
Size
608KB
-
MD5
f7271f8b48b06a90590d7f92102e3ebe
-
SHA1
9a8316d25c28f40df4862dfdb4ab80794a66df5f
-
SHA256
faa0d9846b66eab0d4ad7295292ce3d475622f2ad359390ecdd348bc1ac28148
-
SHA512
c40cff5d7e836b71efa8be8f23a2b1b338b0f68d0c8b7be84ce1b2021840010ddd2f31ad489303e09f6d33aff08ebca644b9e1c952a638e7a816922f7803a7c8
-
SSDEEP
12288:Whem0fmvONboLEZ7xkQEBN4a9Tam3Q/AnoM8aT1+:LXmvOuYRxu2a4qQoy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7271f8b48b06a90590d7f92102e3ebe_JaffaCakes118
Files
-
f7271f8b48b06a90590d7f92102e3ebe_JaffaCakes118.exe windows:4 windows x86 arch:x86
b6437079237afaf224687c4ac1c299e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPage
ImageList_Read
ImageList_GetBkColor
GetEffectiveClientRect
CreateStatusWindow
ImageList_DragMove
ImageList_SetImageCount
ImageList_Write
ImageList_Draw
ImageList_DragLeave
InitCommonControlsEx
ImageList_DragEnter
kernel32
GetEnvironmentStringsW
HeapDestroy
ExitProcess
WriteConsoleW
GetTimeFormatW
AddAtomA
GetEnvironmentVariableW
FreeEnvironmentStringsA
GetCurrentDirectoryA
FreeEnvironmentStringsW
GetModuleFileNameA
InitializeCriticalSection
GetCurrentProcessId
RtlUnwind
TlsAlloc
GetSystemTimeAsFileTime
EnumCalendarInfoW
WriteProfileSectionA
lstrcpynA
GetVersionExA
IsValidCodePage
GetStartupInfoA
SetEnvironmentVariableA
FoldStringA
GetCurrentThreadId
GetProcAddress
LCMapStringW
GetUserDefaultLCID
GetStringTypeA
GetFileType
CreateDirectoryExA
WideCharToMultiByte
OpenProcess
LocalAlloc
GetSystemTime
GetLocaleInfoA
RemoveDirectoryA
HeapAlloc
CompareStringA
FoldStringW
CreateEventA
GetCommandLineA
ReadConsoleOutputAttribute
FlushConsoleInputBuffer
DeleteCriticalSection
ReadFile
SetThreadAffinityMask
GetLocaleInfoW
GetAtomNameW
IsBadWritePtr
LCMapStringA
UnhandledExceptionFilter
CreateDirectoryA
HeapCreate
GetEnvironmentStrings
InterlockedExchangeAdd
EnumSystemLocalesA
EnterCriticalSection
GetTempPathA
GetTickCount
FlushFileBuffers
GetFileAttributesA
SetFilePointer
CreateMutexA
TlsSetValue
GetSystemDefaultLangID
GetProfileSectionA
GetSystemInfo
OpenMutexA
GetCommandLineW
GetACP
HeapReAlloc
IsDebuggerPresent
VirtualAlloc
GetCPInfo
GetStdHandle
GetTimeZoneInformation
GetPrivateProfileSectionA
CompareStringW
GetStringTypeW
InterlockedExchange
WritePrivateProfileSectionW
CreateFileMappingA
GetTimeFormatA
GetModuleFileNameW
VirtualFree
GetPrivateProfileStringW
EnumCalendarInfoA
SetHandleCount
VirtualQuery
GetProcAddress
LeaveCriticalSection
GetStartupInfoW
QueryPerformanceCounter
TlsFree
TerminateProcess
LoadLibraryA
WriteFile
CloseHandle
OpenEventW
WritePrivateProfileStringW
GetModuleHandleA
SetStdHandle
GetLastError
VirtualProtect
FlushInstructionCache
GetVersionExW
HeapFree
GetCurrentThread
GetDateFormatA
GlobalFree
CompareFileTime
FreeLibraryAndExitThread
HeapSize
IsValidLocale
TlsGetValue
GetCurrentProcess
MultiByteToWideChar
SetLastError
lstrcpyn
GetOEMCP
user32
GetLastActivePopup
DialogBoxIndirectParamW
GetWindowContextHelpId
DlgDirListW
DdePostAdvise
ValidateRect
SetWindowPlacement
CharUpperBuffW
LoadImageA
EnumPropsA
EnumPropsExW
GetMenuItemInfoW
DrawTextExA
RegisterClassExA
CharToOemBuffA
RegisterClassA
DdeUnaccessData
Sections
.text Size: 160KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ