Static task
static1
Behavioral task
behavioral1
Sample
8b084d7161f10d6e659bba9ad8c67b5e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8b084d7161f10d6e659bba9ad8c67b5e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8b084d7161f10d6e659bba9ad8c67b5e_JaffaCakes118
-
Size
1010KB
-
MD5
8b084d7161f10d6e659bba9ad8c67b5e
-
SHA1
f8fba6626026aeb490c7ba13a785cf05c723adcd
-
SHA256
08662eea9e82a42f723e874e6f8102b39ffefeffcd498c2a6c42bdd47f11f48e
-
SHA512
9751329046a042ab7aae2a31a14850f54894b3bb183563720bea6e48b4c40b0612490da24bd1864120a35fe177c1d66cb2db6c9e1315df55a2203c5141f3170c
-
SSDEEP
24576:Rs47fJj7G/ZRhK5eJq8RiWZQpBhCfynhm:Rs4fKZRhXE8qqyo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b084d7161f10d6e659bba9ad8c67b5e_JaffaCakes118
Files
-
8b084d7161f10d6e659bba9ad8c67b5e_JaffaCakes118.exe windows:5 windows x86 arch:x86
ad78eb1434c9057e4a112f83e8dc525e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoTaskMemFree
kernel32
GlobalFree
VirtualAlloc
HeapReAlloc
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
EnterCriticalSection
ReleaseSemaphore
ReadFile
CloseHandle
GetSystemTimeAsFileTime
LoadLibraryExW
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
GetFileAttributesW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
GetStringTypeW
HeapAlloc
OutputDebugStringW
GetProcAddress
IsDebuggerPresent
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapFree
LeaveCriticalSection
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
DeleteCriticalSection
GetFileType
GetStdHandle
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleExW
ExitProcess
DecodePointer
EncodePointer
SetLastError
RtlUnwind
WriteConsoleW
IsProcessorFeaturePresent
CreateFileW
InitializeCriticalSectionAndSpinCount
shell32
SHGetSpecialFolderLocation
ExtractIconExW
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetSpecialFolderPathW
SHCreateDirectoryExW
CommandLineToArgvW
secur32
TranslateNameW
GetUserNameExW
setupapi
CM_Locate_DevNodeW
CM_Get_Parent
CM_Get_DevNode_Status
CM_Get_DevNode_Registry_Property_ExW
CM_Get_Device_ID_ExW
CM_Get_Device_IDW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiGetClassDevsExW
SetupDiGetClassDevsW
SetupDiGetDriverInfoDetailW
SetupDiEnumDriverInfoW
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInstanceIdW
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupDiCreateDeviceInfoList
SetupInstallFromInfSectionW
SetupGetIntField
SetupGetFieldCount
SetupGetLineCountW
SetupCloseInfFile
SetupOpenInfFileW
oleaut32
GetErrorInfo
RegisterTypeLi
VarNot
VarNeg
VarBstrFromBool
VarBstrFromCy
VarI4FromStr
VariantChangeTypeEx
VariantChangeType
VariantCopyInd
VariantClear
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SysStringLen
SysFreeString
SysReAllocStringLen
SysAllocStringLen
comdlg32
ChooseFontW
GetFileTitleW
PageSetupDlgW
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 310KB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.41ii1 Size: 598KB - Virtual size: 597KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ