Static task
static1
Behavioral task
behavioral1
Sample
323ea034b80087a8521ee539764590f3_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
323ea034b80087a8521ee539764590f3_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
323ea034b80087a8521ee539764590f3_JaffaCakes118
-
Size
1.1MB
-
MD5
323ea034b80087a8521ee539764590f3
-
SHA1
7ab957f696abe9dba803e2da478ff2b326b8f374
-
SHA256
0dc123715b0cf16304f5611e86910f5b826d49d1a6dd96c58ddbe3ad2e39c9f6
-
SHA512
0911d348748f104a56e0ac2d68664c62dc75f5dd2023225cdd17514a31f3bbd37137999f8b033b8812de2ac9db24949135053600ba5204d4dcb16fc767698a77
-
SSDEEP
24576:XQDGNduxjt4e+MVj0cb7gxkCKiqK85hMeLyR:gWQf4e950s7ZVH5n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 323ea034b80087a8521ee539764590f3_JaffaCakes118
Files
-
323ea034b80087a8521ee539764590f3_JaffaCakes118.exe windows:5 windows x86 arch:x86
a25db4b57142961e908121b9d920c909
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
userenv
RegisterGPNotification
kernel32
DeleteFileW
GetACP
GetFileAttributesW
SetStdHandle
GetConsoleMode
CreateFileW
GetPrivateProfileStructW
GetStartupInfoW
GetModuleHandleW
LoadLibraryExW
CreateEventW
OpenMutexW
lstrlenW
FormatMessageW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemInfo
SetCommTimeouts
SetCommBreak
CloseHandle
ReadFile
WaitForSingleObject
InitializeCriticalSectionAndSpinCount
GetLastError
GetCurrentThreadId
HeapSize
VirtualAlloc
LocalFree
GetProcAddress
SetFilePointerEx
GetConsoleWindow
WriteConsoleW
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetStringTypeW
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
GetCPInfo
GetOEMCP
IsValidCodePage
HeapFree
LeaveCriticalSection
EnterCriticalSection
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
ole32
CLSIDFromString
crypt32
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CryptQueryObject
CertGetNameStringW
CryptHashPublicKeyInfo
CryptExportPKCS8
CryptAcquireCertificatePrivateKey
CryptExportPublicKeyInfo
CertVerifyTimeValidity
CryptHashCertificate
CertGetEnhancedKeyUsage
CertFreeCTLContext
CertAddEncodedCertificateToStore
CertGetCertificateContextProperty
CertSetCertificateContextProperty
CertFreeCertificateContext
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptMsgGetParam
CryptMsgOpenToDecode
CryptDecodeObject
CryptDecodeObjectEx
CryptEncodeObject
CryptBinaryToStringW
user32
MonitorFromRect
CopyAcceleratorTableW
DrawIcon
UpdateWindow
GetDC
winspool.drv
ConfigurePortW
EnumMonitorsW
FindNextPrinterChangeNotification
uxtheme
GetThemeColor
IsThemeActive
SetWindowTheme
OpenThemeData
GetThemePartSize
setupapi
CM_Locate_DevNodeW
CM_Get_Parent_Ex
CM_Get_Parent
CM_Get_Device_ID_ExW
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiGetClassDevsExW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInstanceIdW
SetupDiCreateDeviceInfoListExW
SetupCloseFileQueue
SetupOpenFileQueue
SetupGetStringFieldW
SetupGetLineCountW
SetupOpenInfFileW
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1000KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ