Static task
static1
Behavioral task
behavioral1
Sample
01de1bfd335d92f5c9d14ba8ab1f46d9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
01de1bfd335d92f5c9d14ba8ab1f46d9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
01de1bfd335d92f5c9d14ba8ab1f46d9_JaffaCakes118
-
Size
326KB
-
MD5
01de1bfd335d92f5c9d14ba8ab1f46d9
-
SHA1
0d11c794aebf58c66596fe38198d242d3dc84c1b
-
SHA256
4fb0d17e8e0c6ca59a406651cfb5ade47b686a8a3306c425b6848594f21a5948
-
SHA512
efb4c844ead6ac3231e8d5b723e92f2aaccc5345293551317d8368f61a65f778bb007a2a500d421fdd2a39acd9fe99ed246a20bdcc62599c0e48a23fecd7df07
-
SSDEEP
3072:+tefY+8rpm1NGmuJBw3XSgzyUgIstJ7F4:EmYRmXGmQw3XSgzyUf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01de1bfd335d92f5c9d14ba8ab1f46d9_JaffaCakes118
Files
-
01de1bfd335d92f5c9d14ba8ab1f46d9_JaffaCakes118.exe windows:0 windows x86 arch:x86
32064af356f58b6d2ecf71f177b4d4a7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddLocalAlternateComputerNameA
AddLocalAlternateComputerNameW
BaseCleanupAppcompatCacheSupport
BasepCheckWinSaferRestrictions
BeginUpdateResourceW
CheckNameLegalDOS8Dot3W
ConnectNamedPipe
CopyFileExW
CreateDirectoryExA
CreateFileA
CreateMailslotW
CreateProcessA
CreateSemaphoreA
CreateTimerQueueTimer
DebugActiveProcess
DeleteFiber
DeleteTimerQueueTimer
DisableThreadLibraryCalls
DnsHostnameToComputerNameA
EnumCalendarInfoA
EnumCalendarInfoW
EnumDateFormatsA
EnumDateFormatsExA
EnumSystemCodePagesW
EnumSystemLanguageGroupsA
EnumerateLocalComputerNamesA
EscapeCommFunction
ExpandEnvironmentStringsA
ExpungeConsoleCommandHistoryA
ExtendVirtualBuffer
FatalExit
FindFirstFileExA
FindFirstVolumeA
FindNextChangeNotification
FindNextFileW
FindNextVolumeMountPointA
FindNextVolumeW
FlushConsoleInputBuffer
FlushViewOfFile
FreeConsole
GetAtomNameW
GetCommProperties
GetConsoleAliasExesLengthA
GetConsoleAliasExesW
GetConsoleAliasW
GetConsoleCommandHistoryLengthA
GetConsoleCommandHistoryW
GetConsoleHardwareState
GetConsoleNlsMode
GetConsoleSelectionInfo
GetConsoleTitleW
GetDefaultSortkeySize
GetDiskFreeSpaceExA
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExA
GetFullPathNameA
GetGeoInfoW
GetHandleContext
GetLinguistLangSize
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringW
GetProcAddress
GetProfileIntW
GetStdHandle
GetSystemDirectoryA
GetSystemTime
GetSystemWindowsDirectoryA
GetTapePosition
GetThreadIOPendingFlag
GetThreadPriorityBoost
GetTimeFormatW
GetWindowsDirectoryA
GlobalDeleteAtom
GlobalFix
GlobalFree
GlobalUnWire
GlobalUnlock
HeapExtend
HeapReAlloc
HeapValidate
IsBadCodePtr
IsValidLocale
IsValidUILanguage
LZCopy
LZInit
LZOpenFileW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalCompact
LocalFileTimeToFileTime
MapUserPhysicalPages
MoveFileWithProgressW
MulDiv
OpenWaitableTimerW
PeekConsoleInputA
PeekNamedPipe
Process32FirstW
Process32Next
QueryInformationJobObject
QueueUserWorkItem
RegisterWaitForSingleObjectEx
RemoveLocalAlternateComputerNameA
ResumeThread
RtlUnwind
SetComputerNameExW
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleFont
SetConsoleIcon
SetConsoleNumberOfCommandsW
SetErrorMode
SetFileAttributesA
SetFileAttributesW
SetLastConsoleEventActive
SetSystemTime
SetSystemTimeAdjustment
SetTapePosition
ShowConsoleCursor
Sleep
TlsFree
TlsSetValue
TransactNamedPipe
UTUnRegister
UpdateResourceA
VerLanguageNameW
VerifyVersionInfoA
VerifyVersionInfoW
VirtualLock
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleInputVDMA
WriteConsoleInputVDMW
WriteFileEx
_hread
lstrcatA
lstrcmpiA
lstrcpyA
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ