Static task
static1
Behavioral task
behavioral1
Sample
1f3a78c86cee733fe84844c7358ab779_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1f3a78c86cee733fe84844c7358ab779_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1f3a78c86cee733fe84844c7358ab779_JaffaCakes118
-
Size
2.4MB
-
MD5
1f3a78c86cee733fe84844c7358ab779
-
SHA1
63825bf22c6e26575b5b35ab3bf2892664972225
-
SHA256
fbc1024cc1c6ebd2fff0f2cb108606df3dc7288f50da1575aa90a35920840c72
-
SHA512
7e7dd489dd20bc4c4ed6c66fde92339aace7890dddc84c1cabb96030e78c0b67946419a3d8fe2ef952597555456b7931e632d4a3643a5ac6c875baf098b71550
-
SSDEEP
24576:itcHTcJzBttNzIOiG6eVSillloFTXkFgBXdMTUVFoat:itcktNUkxkAlow+M4gat
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f3a78c86cee733fe84844c7358ab779_JaffaCakes118
Files
-
1f3a78c86cee733fe84844c7358ab779_JaffaCakes118.exe windows:5 windows x86 arch:x86
bb40ccd5d9ca15cbcfac9d25c496476e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
BeginDeferWindowPos
AnyPopup
GetDialogBaseUnits
DdeClientTransaction
IsDialogMessageW
GetIconInfo
DestroyIcon
LoadBitmapW
CopyRect
FrameRect
WindowFromPoint
ClientToScreen
GetWindowRect
GetClientRect
EnableScrollBar
ShowScrollBar
SetScrollRange
GetWindowDC
GetDC
DrawIcon
TrackPopupMenuEx
DeleteMenu
GetSystemMetrics
CharNextW
DrawFrameControl
wininet
HttpQueryInfoW
InternetOpenUrlW
shell32
DragQueryFileW
kernel32
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
GetStringTypeW
OutputDebugStringW
LoadLibraryExW
HeapFree
GetCPInfo
GetACP
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
TlsFree
RtlUnwind
GetConsoleCP
VirtualAlloc
HeapAlloc
GetEnvironmentStringsW
GetLastError
EnterCriticalSection
LeaveCriticalSection
ReadFile
SetEndOfFile
EscapeCommFunction
MulDiv
GetSystemInfo
FileTimeToSystemTime
CreateSemaphoreW
LoadLibraryW
GetModuleFileNameW
GlobalFindAtomW
GetSystemDirectoryW
FindFirstFileW
CopyFileW
GetDefaultCommConfigW
GetOEMCP
GetUserDefaultLCID
GetConsoleWindow
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
GlobalUnlock
GetCommandLineW
CreateFileW
RaiseException
IsProcessorFeaturePresent
EncodePointer
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
advapi32
RegEnumValueW
OpenSCManagerW
RegEnumKeyExW
comdlg32
FindTextW
PageSetupDlgW
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 415KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.otaih Size: 618KB - Virtual size: 617KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ao1lng Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nea0t Size: 459KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.3ya4re Size: 261KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ