Static task
static1
Behavioral task
behavioral1
Sample
4c64d7af0371efc2a472994a8cfd9ccf_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4c64d7af0371efc2a472994a8cfd9ccf_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4c64d7af0371efc2a472994a8cfd9ccf_JaffaCakes118
-
Size
614KB
-
MD5
4c64d7af0371efc2a472994a8cfd9ccf
-
SHA1
d34550d004c21fff6cea912248c6e4a05550a90c
-
SHA256
9a7aafc35a8983893b39ee71830536113da8df6434e3cb1cfa8ebdc531c64d95
-
SHA512
f1562196fbf9c72e5032416549b3565f66a1c8c4ad419146cd97534cf526656a0223d21bcfe2e140c672fb99b0fb6ad069b9b43a879df127f5f4da7bdded5452
-
SSDEEP
6144:uwBxFHSOSy0F8pn/fO9Kl1B7MJM5lzqoJnDCd:ugz/SyK8V/fO9Kr5lzqYCd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c64d7af0371efc2a472994a8cfd9ccf_JaffaCakes118
Files
-
4c64d7af0371efc2a472994a8cfd9ccf_JaffaCakes118.exe windows:5 windows x64 arch:x64
f4546f0bc61b9259cc5763722d347b32
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
CreateErrorInfo
GetErrorInfo
SetErrorInfo
DispGetIDsOfNames
RegisterTypeLib
LoadTypeLibEx
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SysFreeString
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
user32
MessageBoxA
CharNextW
LoadStringW
SetWindowLongPtrW
GetWindowLongPtrW
CreateWindowExW
UnregisterClassW
TranslateMessage
SetTimer
RegisterClassW
PostThreadMessageW
PeekMessageW
MessageBoxW
LoadStringW
KillTimer
GetSystemMetrics
GetClassInfoW
DispatchMessageW
DestroyWindow
DefWindowProcW
CharUpperW
CharNextW
kernel32
Sleep
VirtualFree
VirtualAlloc
HeapFree
HeapAlloc
GetProcessHeap
lstrlenW
lstrcpynW
VirtualQuery
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
GetCurrentThreadId
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
GetModuleHandleW
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
SizeofResource
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
ReadFile
LockResource
LocalFree
LoadResource
LoadLibraryW
IsValidLocale
GetVersionExW
GetUserDefaultLCID
GetTickCount
GetThreadLocale
GetSystemDefaultLCID
GetStdHandle
GetShortPathNameW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcess
GetCommandLineW
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageW
FindResourceW
FindFirstFileW
FindClose
EnumSystemLocalesW
EnumCalendarInfoW
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ole32
CreateBindCtx
CoTaskMemFree
CLSIDFromProgID
StringFromCLSID
CoCreateInstance
CoLockObjectExternal
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
CoInitialize
IsEqualGUID
urlmon
MkParseDisplayNameEx
Sections
.text Size: 506KB - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 41KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 424B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ