Static task
static1
Behavioral task
behavioral1
Sample
9b075d4a92103efd336a9392c706bfef_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9b075d4a92103efd336a9392c706bfef_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9b075d4a92103efd336a9392c706bfef_JaffaCakes118
-
Size
2.3MB
-
MD5
9b075d4a92103efd336a9392c706bfef
-
SHA1
86f81da55876ad108cd7f74d57b705e463079238
-
SHA256
787852efc77c78ac3aa41630181bbe15ce21a3b3c0050d36a2ed35d09dd44693
-
SHA512
954d2497799eeb55e332fc8ac09afadd99605792eae55c23e2ac2a1f83aab3a4186da6469e29e4b186a72aa191ac9e0c61396314d3b02129ab91df2831b65fbf
-
SSDEEP
24576:uspzGeto28vHpyzqYhwQuKvhjFiZPVXDgE2Gp17T/el6j:uwJto2zzqVkEt7hj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b075d4a92103efd336a9392c706bfef_JaffaCakes118
Files
-
9b075d4a92103efd336a9392c706bfef_JaffaCakes118.exe windows:5 windows x86 arch:x86
627b40d9fd0644ed00c6246809ccd060
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
WSAAsyncGetHostByName
user32
GetWindowTextLengthW
CreateWindowExW
ShowWindow
DrawIconEx
DestroyCursor
EqualRect
OffsetRect
UnionRect
InflateRect
InvertRect
FrameRect
IsIconic
SetPropW
DeleteMenu
InsertMenuW
SetMenu
SendInput
CharLowerW
DrawAnimatedRects
crypt32
CertVerifyCertificateChainPolicy
CertGetNameStringW
CertNameToStrW
CertControlStore
CertAddStoreToCollection
CertFreeCTLContext
CertAddCertificateContextToStore
CertSetCertificateContextProperty
CertCreateCertificateContext
CertEnumCertificatesInStore
CertCloseStore
CryptMsgClose
CryptEnumOIDInfo
CryptEncodeObject
kernel32
RtlUnwind
LoadLibraryExW
OutputDebugStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetVersion
GlobalLock
VirtualAlloc
GetEnvironmentStringsW
PulseEvent
WaitForSingleObject
GetFileSize
SetCommMask
GetSystemInfo
FileTimeToLocalFileTime
FileTimeToDosDateTime
lstrlenW
LoadLibraryW
CreateFileW
FindFirstFileW
FindNextFileW
SetDefaultCommConfigW
GetACP
GetUserDefaultLCID
GetConsoleWindow
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
EnterCriticalSection
GetCPInfo
LeaveCriticalSection
GetOEMCP
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
HeapFree
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
advapi32
RegSetValueExW
RegQueryInfoKeyW
RegCreateKeyExW
opengl32
glViewport
glTexSubImage2D
glTexParameteri
glStencilFunc
glReadPixels
glGetString
glGetIntegerv
glGetFloatv
glGenTextures
glFlush
glDrawArrays
glDepthMask
glDeleteTextures
glColorMask
glClearColor
glCopyTexImage2D
winspool.drv
EnumPortsW
ReadPrinter
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 554KB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l0ul3 Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.o51e Size: 585KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cole Size: 668KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ