Static task
static1
Behavioral task
behavioral1
Sample
9e78b7edaf2d48bf96f1fac3b97ccdde_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9e78b7edaf2d48bf96f1fac3b97ccdde_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9e78b7edaf2d48bf96f1fac3b97ccdde_JaffaCakes118
-
Size
2.0MB
-
MD5
9e78b7edaf2d48bf96f1fac3b97ccdde
-
SHA1
ba29cf016470911c54eb9cbfdda0a1abe03e9ebd
-
SHA256
a4fd8a96f667551d5f4a8406e32c7067caeb382d64b0aca91d1f473489657358
-
SHA512
4ff84a6b4ee4dd636801a2c1066bec6cef6e26aaa069755626b42aafb40c58e40544e2ff16c7c700f906356d58fb632539c9d30131cfb0d6e02fe372f67f26b4
-
SSDEEP
24576:ObGhJK67YM9oL44Qza2MFTz228lZqKBDu2zVnM8:Ob0JKLay+ee28lZqKM0VM8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e78b7edaf2d48bf96f1fac3b97ccdde_JaffaCakes118
Files
-
9e78b7edaf2d48bf96f1fac3b97ccdde_JaffaCakes118.exe windows:5 windows x86 arch:x86
dc21862d3a0a7f0ce0b0d73643de6e1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigInterfaceTransportRemove
MprConfigInterfaceEnum
MprConfigInterfaceGetHandle
MprConfigInterfaceCreate
MprConfigTransportCreate
advapi32
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegEnumValueW
user32
UnpackDDElParam
IsDialogMessageW
InvertRect
GetSysColor
GetClientRect
GetMenuItemInfoW
SetMenuInfo
GetMenuState
ReleaseCapture
CheckDlgButton
DeferWindowPos
ShowOwnedPopups
DestroyWindow
IsWindow
CreateWindowExW
kernel32
OutputDebugStringW
GetStringTypeW
HeapAlloc
HeapReAlloc
GetFileType
RtlUnwind
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
VirtualAlloc
OpenThread
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
InitAtomTable
SetEndOfFile
FindClose
GetSystemTime
GetLocalTime
CreateEventW
DeleteFileW
WideCharToMultiByte
LCMapStringW
GetThreadLocale
GetConsoleWindow
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
LoadLibraryExW
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LeaveCriticalSection
HeapFree
HeapSize
winspool.drv
SetPortW
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 958KB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.7sh1 Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vd67 Size: 326KB - Virtual size: 326KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.39d3e Size: 408KB - Virtual size: 407KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ