Static task
static1
Behavioral task
behavioral1
Sample
185cb84b0a690ed341bf970eed9fb67c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
185cb84b0a690ed341bf970eed9fb67c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
185cb84b0a690ed341bf970eed9fb67c_JaffaCakes118
-
Size
2.3MB
-
MD5
185cb84b0a690ed341bf970eed9fb67c
-
SHA1
14890a7e99e1e79fda7044cc4aa9457b45739e73
-
SHA256
e2aa22c5f1eca162265841a76db0955d9b0c956a7470468b937f5a9e03fcd34c
-
SHA512
6d0dc2fc7e2b0b320c81eb07ea619953aac182d6177d54b97948f7782fbba39582a443415f2a891430e28b99f19a9ba1dba1000b6d3ef9419eee4b83e381da5c
-
SSDEEP
24576:/8hRWcFOkB3Q7t0aJ5bQwc1/bKjiUQ7j0Eo4k:/83BaJ5b/y/7j3y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 185cb84b0a690ed341bf970eed9fb67c_JaffaCakes118
Files
-
185cb84b0a690ed341bf970eed9fb67c_JaffaCakes118.exe windows:5 windows x86 arch:x86
6ed3ffd24c4e378daebf43defb40ff71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassNameW
AnyPopup
GetInputState
EnableWindow
DdeDisconnectList
ReuseDDElParam
GetRawInputBuffer
IsWinEventHookInstalled
GetMessageW
MessageBoxW
AdjustWindowRectEx
RedrawWindow
DrawTextW
GetSubMenu
userenv
LoadUserProfileW
kernel32
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
GlobalUnlock
CloseHandle
LocalLock
VirtualAlloc
HeapFree
EnterCriticalSection
ReleaseSemaphore
GetFileType
SetEndOfFile
SetFilePointer
GetSystemInfo
LoadLibraryExW
GetModuleFileNameW
GetTempPathW
FindFirstFileW
GetDefaultCommConfigW
IsValidCodePage
IsValidLocale
LocalAlloc
WideCharToMultiByte
HeapAlloc
GetStringTypeW
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
CreateFileW
GetProcessHeap
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
GetACP
GetOEMCP
GetCPInfo
LeaveCriticalSection
RtlUnwind
OutputDebugStringW
advapi32
RegEnumValueW
winspool.drv
EnumPortsW
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 628KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.th00 Size: 375KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8e2ah Size: 505KB - Virtual size: 504KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rte4o Size: 410KB - Virtual size: 409KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ