Static task
static1
Behavioral task
behavioral1
Sample
ff3f88f6c5ede04269a6307951a4380b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff3f88f6c5ede04269a6307951a4380b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff3f88f6c5ede04269a6307951a4380b_JaffaCakes118
-
Size
469KB
-
MD5
ff3f88f6c5ede04269a6307951a4380b
-
SHA1
4d8b90ea3898f2f38bfe410efa3d2bd9e1819828
-
SHA256
03862dc85883a81ac857c21db2f878571927465f0655976d0810fcb3dd965ea7
-
SHA512
e6921c2c194b04366c33f7e4d1373ae946fda6b2c687c47305dc6d4b8c4667e7b51c0b51bb56d6fea7a111d09ce022be5e422d44a57c4033a147759cc856adff
-
SSDEEP
12288:YeuV/emZmTdYd+3f8045ZJ9HzkiN6xPEa8vFTp:Ye+ZJd+3f1IpN6ia6FT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff3f88f6c5ede04269a6307951a4380b_JaffaCakes118
Files
-
ff3f88f6c5ede04269a6307951a4380b_JaffaCakes118.exe windows:4 windows x86 arch:x86
7a868d0140ebdf43cb92082ff00fa9f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CreateServiceA
CryptHashData
CryptSetProvParam
RegDeleteKeyW
RevertToSelf
AbortSystemShutdownW
RegCreateKeyA
user32
DrawAnimatedRects
CreateWindowExW
SetPropW
IsCharAlphaNumericW
RegisterClassA
RegisterClassExA
WinHelpW
MessageBoxA
ShowWindow
comdlg32
GetSaveFileNameA
ChooseColorW
ChooseFontA
gdi32
SetLayout
CreatePenIndirect
GetTextMetricsA
GetObjectType
UnrealizeObject
SelectClipRgn
DeleteDC
GetWorldTransform
SetEnhMetaFileBits
CloseFigure
EnumEnhMetaFile
StartPage
CreateFontIndirectA
RectInRegion
SetICMProfileW
ArcTo
CreateDCA
GetNearestColor
GetCharABCWidthsA
GetKerningPairs
StrokeAndFillPath
GetDeviceCaps
SetBkMode
CreateMetaFileW
shell32
SheSetCurDrive
DragAcceptFiles
kernel32
LCMapStringW
LCMapStringA
WriteFile
InterlockedDecrement
DebugBreak
TerminateProcess
SetStdHandle
GetTimeZoneInformation
HeapValidate
VirtualQuery
OpenProcess
GetStringTypeA
GetStdHandle
GetSystemTime
GetModuleFileNameA
WideCharToMultiByte
SetEnvironmentVariableA
IsBadReadPtr
OpenFileMappingA
GetProcAddress
GetStringTypeW
FlushInstructionCache
GetFileType
HeapCreate
VirtualAlloc
ExitProcess
TlsAlloc
HeapReAlloc
TlsGetValue
LocalFileTimeToFileTime
DeleteCriticalSection
RtlUnwind
GetStartupInfoA
QueryPerformanceCounter
InterlockedIncrement
GetEnvironmentStringsW
MultiByteToWideChar
GetEnvironmentStrings
GetVersionExA
EnumTimeFormatsA
GlobalAddAtomW
GetCurrentThread
GetCurrentProcess
SetComputerNameW
WriteConsoleW
FindFirstFileA
GetCurrencyFormatW
SetLastError
HeapFree
CreateMutexA
SetHandleCount
LoadResource
ReadConsoleOutputCharacterW
TlsSetValue
SetConsoleCtrlHandler
LoadLibraryA
GetLastError
CompareStringA
GetOEMCP
GetACP
OutputDebugStringA
FreeEnvironmentStringsW
SetPriorityClass
SetWaitableTimer
HeapAlloc
OpenMutexA
InterlockedExchange
lstrcmpA
FlushFileBuffers
GetCurrentThreadId
GetCurrentProcessId
ReadFile
CloseHandle
CompareStringW
IsBadWritePtr
GetTickCount
GetVersion
TlsFree
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
VirtualFree
GetCommandLineA
lstrcmpW
SetFilePointer
EnterCriticalSection
HeapDestroy
UnhandledExceptionFilter
GetModuleHandleA
WriteConsoleOutputCharacterA
DeleteFileW
LeaveCriticalSection
InitializeCriticalSection
GetCPInfo
GetLocalTime
comctl32
ImageList_SetIconSize
ImageList_DragEnter
DestroyPropertySheetPage
ImageList_GetImageRect
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddIcon
ImageList_GetDragImage
InitMUILanguage
CreateStatusWindow
MakeDragList
_TrackMouseEvent
ImageList_SetBkColor
Sections
.text Size: 309KB - Virtual size: 308KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ