Static task
static1
Behavioral task
behavioral1
Sample
b6410bad78a7cd082a50ed8843fabdcf_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b6410bad78a7cd082a50ed8843fabdcf_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
b6410bad78a7cd082a50ed8843fabdcf_JaffaCakes118
-
Size
9.6MB
-
MD5
b6410bad78a7cd082a50ed8843fabdcf
-
SHA1
a727c4853bf76d240a8a406027ea278002e15d05
-
SHA256
60c2ec30a41d885eb0595191d126234c63e2541b6a273c5f6e293cccf0e6b12f
-
SHA512
6397c5481031da44b6989a2064c6c520bdfbbb9cacfffd904445ef8ebf1fecc5eacf9628ab37073ea91f1f5f50d10f7120091cf396d6497c55d922a39d28ed97
-
SSDEEP
196608:lcwhOpfRKP+IgLMv9ymMu18fXCJDmZKgA88cDel:6whefRa+wv9ym9vJ3xl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6410bad78a7cd082a50ed8843fabdcf_JaffaCakes118
Files
-
b6410bad78a7cd082a50ed8843fabdcf_JaffaCakes118.exe windows:5 windows x86 arch:x86
bcd55da39f93235c079ebcd32dccd879
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameA
ReadFile
SetFileAttributesA
SetFilePointer
SetFileTime
WriteFile
CloseHandle
GetLastError
WaitForSingleObject
Sleep
GetExitCodeProcess
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryExA
GlobalAlloc
GlobalFree
GetShortPathNameA
MulDiv
lstrcmpA
lstrcmpiA
GetPrivateProfileStringA
WritePrivateProfileStringA
MoveFileA
MultiByteToWideChar
GetFileSize
GetTickCount
GetModuleFileNameA
GetCommandLineA
SetErrorMode
GetCurrentProcess
ExitProcess
GetWindowsDirectoryA
GetTempPathA
CopyFileA
GetDiskFreeSpaceA
CreateThread
GlobalLock
GlobalUnlock
lstrcpynA
LoadLibraryA
VerSetConditionMask
CreateFileA
RemoveDirectoryA
CreateProcessA
GetSystemDirectoryA
lstrcatA
lstrlenA
GetTempFileNameA
VerifyVersionInfoW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetFileAttributesA
FlushFileBuffers
OutputDebugStringW
LCMapStringW
HeapAlloc
LoadLibraryExW
GetModuleFileNameW
GetStdHandle
RtlUnwind
GetStringTypeW
HeapFree
WideCharToMultiByte
GetModuleHandleExW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
CreateFileW
TlsGetValue
TerminateProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
SetLastError
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsProcessorFeaturePresent
DecodePointer
IsDebuggerPresent
EncodePointer
GetSystemTimeAsFileTime
RaiseException
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CreateDirectoryA
CompareFileTime
SearchPathA
SetCurrentDirectoryA
GetConsoleCP
ExpandEnvironmentStringsA
user32
MessageBoxIndirectA
CharPrevA
GetDlgItemTextA
SetDlgItemTextA
PeekMessageA
DispatchMessageA
SystemParametersInfoA
LoadCursorA
LoadBitmapA
SetClassLongA
GetWindowLongA
GetSysColor
ScreenToClient
SetCursor
GetWindowRect
TrackPopupMenu
AppendMenuA
EnableMenuItem
CreatePopupMenu
GetSystemMenu
GetSystemMetrics
IsWindowEnabled
SetClipboardData
CloseClipboard
OpenClipboard
CheckDlgButton
EndDialog
DialogBoxParamA
IsWindowVisible
SetWindowPos
CreateWindowExA
GetClassInfoA
RegisterClassA
CallWindowProcA
GetMessagePos
CharNextA
ExitWindowsEx
SetWindowTextA
SetTimer
CreateDialogParamA
DestroyWindow
LoadImageA
FindWindowExA
SetWindowLongA
InvalidateRect
GetDC
SetForegroundWindow
EnableWindow
GetDlgItem
ShowWindow
IsWindow
PostQuitMessage
SendMessageTimeoutA
SendMessageA
wsprintfA
FillRect
GetClientRect
EndPaint
BeginPaint
DrawTextA
DefWindowProcA
EmptyClipboard
advapi32
RegOpenKeyExA
RegEnumKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegEnumValueA
shell32
SHGetFileInfoA
SHGetSpecialFolderLocation
SHBrowseForFolderA
ShellExecuteA
SHFileOperationA
SHGetPathFromIDListA
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 5.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
PMux3n3N