Static task
static1
Behavioral task
behavioral1
Sample
024035b63c85912fbe98a6e1d96cd689_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
024035b63c85912fbe98a6e1d96cd689_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
024035b63c85912fbe98a6e1d96cd689_JaffaCakes118
-
Size
648KB
-
MD5
024035b63c85912fbe98a6e1d96cd689
-
SHA1
62cb2505051f5b057bdbe792209f59eb37f393bd
-
SHA256
8f7b48d9db3bc8a6f1cd75e7bdc5ee6e0464e224140ea2241a2f0cbbab84d907
-
SHA512
797c7ba36014e511689dadcb910cbdeb94587d4219f1aa35568ba4222ea8e15e916e4cb0b9af46980991252fce1e4cf63046935773e45f84cea849a15b1af3bc
-
SSDEEP
12288:NwDqB37sgcy/lbyAUsppj21n5SiYxI60QU4AHyyOjeuNTcDbKQdkQy/+5j2:lAgt/luAUsphw5SiYxpbqwjeuNTREkQi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 024035b63c85912fbe98a6e1d96cd689_JaffaCakes118
Files
-
024035b63c85912fbe98a6e1d96cd689_JaffaCakes118.exe windows:4 windows x86 arch:x86
ffcfa1e819b5058cf58692d974a53c3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetUserDefaultLCID
SetHandleCount
SetFilePointer
MultiByteToWideChar
Sleep
OpenSemaphoreA
WriteConsoleA
FreeLibrary
GetConsoleCP
GetStringTypeW
DeleteCriticalSection
GetSystemTime
WideCharToMultiByte
GetProcAddress
CreateToolhelp32Snapshot
FindResourceW
VirtualFree
GetCurrentProcess
GetStringTypeA
HeapDestroy
GetModuleFileNameA
EnterCriticalSection
GetCPInfo
IsValidLocale
QueryPerformanceCounter
GetTickCount
TlsGetValue
FlushFileBuffers
InterlockedIncrement
LocalShrink
GetEnvironmentStrings
GetStartupInfoA
GetCurrentThreadId
SetConsoleCtrlHandler
GetDateFormatA
GetProcessHeap
ReadFile
GetCurrentProcessId
GetLocaleInfoW
HeapCreate
VirtualQuery
GetShortPathNameW
InterlockedExchange
GetACP
SetStdHandle
InitializeCriticalSection
GetTimeZoneInformation
GetOEMCP
CloseHandle
RtlUnwind
ReadConsoleOutputCharacterW
CompareStringA
GetEnvironmentStringsW
GetModuleFileNameW
SetLastError
IsValidCodePage
HeapAlloc
LeaveCriticalSection
GetCommandLineA
GetConsoleOutputCP
FreeEnvironmentStringsA
GetModuleHandleA
OpenMutexA
LCMapStringA
GetStdHandle
EnumSystemLocalesA
VirtualAlloc
GetTimeFormatA
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetLocaleInfoA
InterlockedDecrement
lstrcpyW
OpenFileMappingW
LocalLock
GetPrivateProfileStringA
TerminateProcess
GetVersionExA
GetSystemTimeAsFileTime
TryEnterCriticalSection
GetCommandLineW
LCMapStringW
HeapFree
CompareFileTime
WriteConsoleW
LoadLibraryA
GetStartupInfoW
WriteFile
GetLastError
GetSystemTimeAdjustment
SetConsoleCursorPosition
GetFileType
HeapSize
TlsAlloc
SetUnhandledExceptionFilter
CompareStringW
GetConsoleMode
TlsFree
TlsSetValue
IsDebuggerPresent
SetEnvironmentVariableA
HeapReAlloc
CreateMutexA
GetCurrentThread
ExitProcess
CreateFileA
comctl32
ImageList_GetIconSize
ImageList_Replace
ImageList_Draw
ImageList_Remove
ImageList_Duplicate
ImageList_DrawEx
InitCommonControlsEx
ImageList_EndDrag
ImageList_AddIcon
ImageList_SetFilter
ImageList_GetFlags
ImageList_DragEnter
user32
UnpackDDElParam
UnregisterClassW
RegisterClassExA
SendMessageTimeoutW
AdjustWindowRect
GetSystemMenu
GetCursorPos
WINNLSEnableIME
DdeInitializeA
GetTitleBarInfo
CopyAcceleratorTableA
CharNextW
CharUpperA
ChildWindowFromPointEx
TranslateAcceleratorA
CharNextExA
BeginPaint
RealGetWindowClass
DdeCreateStringHandleW
RegisterClassA
CharNextA
GetClassInfoW
OemToCharBuffW
DispatchMessageA
GetKeyboardLayoutNameA
DefFrameProcW
GetProcessWindowStation
GetAsyncKeyState
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ