Static task
static1
Behavioral task
behavioral1
Sample
afc1c31cf594f755ce41555fa1b066ff_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
afc1c31cf594f755ce41555fa1b066ff_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
afc1c31cf594f755ce41555fa1b066ff_JaffaCakes118
-
Size
231KB
-
MD5
afc1c31cf594f755ce41555fa1b066ff
-
SHA1
fa980ca3157ec7b8d4092b9558f8e822c214eb54
-
SHA256
953829ba4d7b404230c476b3afcc023dea1b2e7635b6f385676cee96c53e30da
-
SHA512
8880555f055ee13062b4d9f9575f0c5706fe316e01f30a79d3fa87dc607488d3586481d063b47d1ca99b82c62fdf375fbe1da588ffb23b3d3fb1a45204fa1050
-
SSDEEP
3072:Bj6MeMCmz9k9JYb4Sb9HBO/ezx746u9yys7h1gGeITTgBi26caVQIptyT0:BOwGYb429k/DCAIP6E3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afc1c31cf594f755ce41555fa1b066ff_JaffaCakes118
Files
-
afc1c31cf594f755ce41555fa1b066ff_JaffaCakes118.exe windows:5 windows x86 arch:x86
d994f51bcee7caa2419dfe637bb0c1af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharNextW
IsDialogMessageW
GetDlgCtrlID
FindWindowExW
ScreenToClient
MessageBoxW
GetWindowRect
EnableWindow
SendDlgItemMessageW
CreateDialogIndirectParamW
MsgWaitForMultipleObjects
LoadCursorW
SetTimer
CreateWindowExW
RegisterClassW
LoadIconW
wsprintfW
PeekMessageW
DestroyWindow
GetDesktopWindow
ShowWindow
DialogBoxIndirectParamW
EndDialog
GetDlgItem
SetWindowTextW
SetWindowPos
GetWindowDC
ReleaseDC
PostQuitMessage
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
KillTimer
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteW
ShellExecuteExW
CommandLineToArgvW
SHGetMalloc
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoCreateInstance
advapi32
RegOpenKeyW
RegEnumKeyW
RegCreateKeyW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegEnumValueW
RegDeleteKeyW
RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
kernel32
GetConsoleMode
GetConsoleCP
LoadLibraryA
RtlUnwind
InitializeCriticalSection
ReadFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
WriteFile
HeapCreate
HeapDestroy
HeapReAlloc
VirtualAlloc
VirtualFree
SetFilePointer
SetStdHandle
CloseHandle
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
LCMapStringW
FileTimeToLocalFileTime
ExitProcess
Sleep
GetFileType
GetProcAddress
GetUserDefaultLangID
VerLanguageNameW
CompareFileTime
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetFileAttributesW
SetThreadContext
FlushInstructionCache
GetSystemDirectoryW
VirtualProtectEx
WriteProcessMemory
MoveFileExW
ExpandEnvironmentStringsW
GetTempPathW
SetErrorMode
LoadLibraryExA
GetCurrentThread
GetDriveTypeW
GetDiskFreeSpaceW
IsBadReadPtr
VirtualQuery
SetEndOfFile
FlushFileBuffers
GetFileTime
GetCurrentDirectoryW
GetFileAttributesW
GetLocalTime
GetVersion
LoadLibraryExW
DeleteCriticalSection
EnterCriticalSection
RaiseException
MulDiv
GetSystemInfo
FormatMessageW
LocalFree
MoveFileW
GetPrivateProfileStringW
LeaveCriticalSection
HeapAlloc
GetCommandLineA
HeapFree
GetVersionExA
GetProcessHeap
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
Sections
.text Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ