Static task
static1
Behavioral task
behavioral1
Sample
730546370a76dc6a7b087c734fb44d8d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
730546370a76dc6a7b087c734fb44d8d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
730546370a76dc6a7b087c734fb44d8d_JaffaCakes118
-
Size
2.0MB
-
MD5
730546370a76dc6a7b087c734fb44d8d
-
SHA1
1a6c9d012991aa511ffd747b55b78a2feea4df6d
-
SHA256
f738a57c67431b4e55880eb1cddedb267f2dd21960be844e23074205341df4cd
-
SHA512
249240a5f436064b26e0a34184ae9ab7eb03b9864e5882531a5dea506deb8e895d720ae800f3704889dd1b3d020885aa2b99266b8065c9433e1fd6dd4632e54b
-
SSDEEP
24576:gQIt1ROI43/TeVknZEutCmkmcLjsgOb3xi2O6lH8zp:gROdzpgQT3dsd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 730546370a76dc6a7b087c734fb44d8d_JaffaCakes118
Files
-
730546370a76dc6a7b087c734fb44d8d_JaffaCakes118.exe windows:5 windows x86 arch:x86
95221e3e6cfce7319a49aac69e0feff8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
VirtualAlloc
InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
WaitForSingleObject
WaitForMultipleObjects
GetSystemInfo
LoadLibraryW
ExpandEnvironmentStringsW
GetTempPathW
FindNextFileW
GetOEMCP
MultiByteToWideChar
CompareStringW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetVersion
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetConsoleCP
RtlUnwind
GetCPInfo
GetACP
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetStdHandle
CreateFileW
GetProcessHeap
WideCharToMultiByte
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
psapi
GetModuleFileNameExW
GetDeviceDriverBaseNameW
GetDeviceDriverFileNameW
user32
DdeConnect
IsDialogMessageW
CheckMenuRadioItem
InflateRect
FillRect
DrawFocusRect
MapWindowPoints
GetCursor
SetScrollPos
GetDCEx
GetMenuItemID
GetMenu
SetFocus
CharPrevW
CharNextW
EndDialog
BeginDeferWindowPos
GetClassInfoExW
UnregisterDeviceNotification
ActivateKeyboardLayout
DdeAccessData
advapi32
RegDeleteValueW
opengl32
glBlendFunc
glClear
glViewport
glTexParameteri
glTexImage2D
glStencilOp
glStencilMask
glReadPixels
glPixelStorei
glIsEnabled
glGetString
glGetIntegerv
glGetFloatv
glGetError
glGenTextures
glFlush
glEnable
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glCopyTexSubImage2D
glColorMask
glClearDepth
glClearColor
glBindTexture
winspool.drv
AddPortW
EndDocPrinter
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 869KB - Virtual size: 7.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dl7l3 Size: 646KB - Virtual size: 645KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.5l26 Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sgab9 Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ