Static task
static1
Behavioral task
behavioral1
Sample
0433b0f9de7d6604427b006242732d93_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0433b0f9de7d6604427b006242732d93_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
0433b0f9de7d6604427b006242732d93_JaffaCakes118
-
Size
822KB
-
MD5
0433b0f9de7d6604427b006242732d93
-
SHA1
851ddfd961f62bef546c3922fa71becaa18c9f65
-
SHA256
812821bcf53366cb027030833e0bc011f74c1e6638837b63bbf5e57d9c7afa0c
-
SHA512
ed33890d2e9fe4bbcf2f1de9b885f9ed8e6efa1f25f7bc804a3507dce13c65d73acc1444ac0a1965189c2ed301f53b959668ae5be48e535d17ced3765289da73
-
SSDEEP
24576:fiMbqO2dMrrnnugRzMq1xfT3jDj4nOO26R/dCjhD:6MuOqQugBr14l26pd49
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 0433b0f9de7d6604427b006242732d93_JaffaCakes118
Files
-
0433b0f9de7d6604427b006242732d93_JaffaCakes118.exe windows:5 windows x86 arch:x86
b3ca9d10db30b0a3b3a3fc608f4c4df1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CloseHandle
FormatMessageA
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CreateProcessA
GetEnvironmentVariableA
WideCharToMultiByte
CreateToolhelp32Snapshot
Process32First
Process32Next
DeleteFileA
AreFileApisANSI
GetSystemTime
GetTempPathA
GetCurrentProcessId
DeleteFileW
GetVersionExA
OutputDebugStringA
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
MultiByteToWideChar
CreateFileW
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
GetVersionExW
FormatMessageW
LoadLibraryW
WriteFile
GetSystemTimeAsFileTime
UnlockFileEx
GetLastError
OutputDebugStringW
WaitForSingleObjectEx
LockFile
FlushViewOfFile
UnlockFile
InterlockedCompareExchange
WaitForSingleObject
QueryPerformanceCounter
SystemTimeToFileTime
FreeLibrary
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
HeapCompact
CreateMutexW
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetFullPathNameW
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
SetStdHandle
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTimeZoneInformation
SetFilePointerEx
ReadConsoleW
GetFileType
GetConsoleMode
GetConsoleCP
SetEnvironmentVariableA
GetModuleFileNameW
GetStdHandle
CreateThread
TerminateProcess
OpenProcess
GetProcessHeap
HeapFree
HeapAlloc
LocalFree
GlobalUnlock
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleExW
GlobalLock
GetTickCount
GetProcAddress
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
DecodePointer
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
RaiseException
RtlUnwind
LoadLibraryExW
ExitThread
GetCommandLineA
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
user32
TranslateMessage
GetAsyncKeyState
GetClipboardData
CloseClipboard
OpenClipboard
GetMessageA
GetKeyState
CallNextHookEx
DispatchMessageA
UnhookWindowsHookEx
SetWindowsHookExA
MessageBoxA
GetWindowTextA
GetForegroundWindow
advapi32
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegEnumValueA
shell32
ShellExecuteA
SHGetFolderPathA
crypt32
CryptUnprotectData
wininet
InternetCloseHandle
InternetConnectA
InternetOpenUrlA
InternetReadFile
FtpPutFileA
InternetOpenA
Sections
.text Size: 704KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ