Static task
static1
Behavioral task
behavioral1
Sample
84606c86403d4674a93694f929539baa_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
84606c86403d4674a93694f929539baa_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
84606c86403d4674a93694f929539baa_JaffaCakes118
-
Size
2.3MB
-
MD5
84606c86403d4674a93694f929539baa
-
SHA1
0ba5db4bece9eedd638aeec33fdf24867ba07f5a
-
SHA256
8c187dcf0d430efc65bf5a0533576fc94463f82a02a8ceb5e9bc5a52d4424288
-
SHA512
682359a56e97749d9b6c526f23e8e0a5579f9571cad92cc26ffa80f5542f9a59727e6fe83e8f5961ea955b3997c7424a61ee665f901b272b13d36db6bbb81a6d
-
SSDEEP
24576:n1mLXziSqziZwV4KnxntSOurYdsgkyl9BGjd0X6n:ncLXzwiZwVRxLpJ9B98
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84606c86403d4674a93694f929539baa_JaffaCakes118
Files
-
84606c86403d4674a93694f929539baa_JaffaCakes118.exe windows:5 windows x86 arch:x86
bf33a9b968c52d4cb90b267a05cbde06
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawEdge
ActivateKeyboardLayout
DdeFreeDataHandle
DdeAddData
GetIconInfo
CopyIcon
LoadBitmapW
GetTopWindow
GetClassNameW
GetParent
GetWindowLongW
PtInRect
GetSysColor
GetClientRect
ShowScrollBar
ScrollWindowEx
GetWindowDC
DeleteMenu
AppendMenuW
GetMenuItemCount
GetOpenClipboardWindow
GetNextDlgTabItem
GetDlgItemTextW
BringWindowToTop
BeginDeferWindowPos
SendMessageTimeoutW
ExitWindowsEx
DrawFrameControl
kernel32
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GlobalAlloc
VirtualAlloc
GetLastError
DeleteCriticalSection
WaitForMultipleObjects
FlushFileBuffers
GetSystemTime
GetSystemInfo
WriteConsoleW
FileTimeToSystemTime
MapViewOfFile
SetFileAttributesW
DeleteFileW
GetDefaultCommConfigW
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
GetFileType
GetStdHandle
CloseHandle
FileTimeToLocalFileTime
CreateFileW
GetProcessHeap
WideCharToMultiByte
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
oleaut32
VarR8FromStr
SysReAllocStringLen
CreateErrorInfo
GetErrorInfo
SetErrorInfo
RegisterTypeLi
LoadTypeLi
VarNot
VarNeg
VarBoolFromStr
VarBstrFromBool
VarBstrFromDate
VarDateFromStr
SysAllocStringLen
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
SysFreeString
advapi32
RegDeleteValueW
RegEnumKeyExW
winspool.drv
ConfigurePortW
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 711KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.66a4 Size: 353KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i5ri0 Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vaagn Size: 329KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ