Static task
static1
Behavioral task
behavioral1
Sample
6f2b25443630928d3408f35174898979_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6f2b25443630928d3408f35174898979_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
6f2b25443630928d3408f35174898979_JaffaCakes118
-
Size
406KB
-
MD5
6f2b25443630928d3408f35174898979
-
SHA1
1b5200983843c9343bdfd2953fe943a5328fde65
-
SHA256
4a0e7e1c9ef028bb0b7d6de93f7e752ac3abb4aa831ce64b31b814a2ff11f096
-
SHA512
b6414e7708148893ba05d81d7bd3a7bef595d2da7d988361c571b4efa1d85ab892bce690ad9783715c9cafb63b6111c1ee458ae13659cb6e1db2a64565f2d6ff
-
SSDEEP
3072:+idF4R3qeVdUlwKVSaMScAYMBsOM3GKmfEmo5XWZVvTxLsdbdm4IacR7TMaehIW6:+is3DmlwKVrCDOMPVUvT4dm/7Tzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f2b25443630928d3408f35174898979_JaffaCakes118
Files
-
6f2b25443630928d3408f35174898979_JaffaCakes118.exe windows:5 windows x86 arch:x86
ac339fce18fa1a9bd6e57303519d2d0d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadAcceleratorsW
LoadStringW
GetMessageW
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassExW
BeginPaint
EndPaint
PostQuitMessage
SetFocus
DefWindowProcW
DialogBoxParamW
SetTimer
PostMessageW
EndDialog
LoadBitmapW
CreateWindowExW
UpdateWindow
ShowWindow
MessageBoxW
LoadBitmapA
MoveWindow
DestroyWindow
SetWindowPos
InvalidateRect
EnableWindow
GetParent
GetClassNameW
SetWindowTextW
GetMenuItemID
DialogBoxIndirectParamW
DeferWindowPos
SetWindowLongW
GetMenu
FrameRect
DrawFocusRect
DrawFrameControl
kernel32
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
UnhandledExceptionFilter
GetStringTypeW
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
RaiseException
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
WriteFile
CreateFileA
GetCurrentDirectoryW
GetCommandLineW
lstrcatW
lstrcpyW
SleepEx
GetModuleHandleW
GetSystemInfo
GetTickCount
GetLastError
GetCurrentProcess
GetProcAddress
GetCommandLineA
SetUnhandledExceptionFilter
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
gdi32
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
comdlg32
GetOpenFileNameW
comctl32
ord17
Sections
.text Size: 339KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ