Static task
static1
Behavioral task
behavioral1
Sample
0493b5b69e176a6f766777c428270254_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0493b5b69e176a6f766777c428270254_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0493b5b69e176a6f766777c428270254_JaffaCakes118
-
Size
400KB
-
MD5
0493b5b69e176a6f766777c428270254
-
SHA1
ca03430fa4f9c00f0f7440fa0487626fa75feaae
-
SHA256
33fb5b92cb02a85806ca68db1de72110baeb371deb76014a23762422652b5cf4
-
SHA512
dddbbed4521820f31bd3314a26828d97da15bc5232e3953bbd1f6a090c08c9473cf3781f2c65dd6872e304ee326545e01c32a7f36289d2826e05ba0a5ac837c5
-
SSDEEP
12288:GZ1s9QwAW84+QUlBrcIcNm9B1IwM5nsUlTY:GPs9QHWMlrRK35
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0493b5b69e176a6f766777c428270254_JaffaCakes118
Files
-
0493b5b69e176a6f766777c428270254_JaffaCakes118.exe windows:4 windows x86 arch:x86
46c2c8d039278a1c3a19d2deb9d30778
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetImageInfo
CreatePropertySheetPageA
ImageList_DrawEx
ImageList_BeginDrag
ImageList_SetFlags
ImageList_LoadImage
ImageList_EndDrag
InitMUILanguage
CreateToolbar
ImageList_Replace
ImageList_SetImageCount
ImageList_SetDragCursorImage
CreateStatusWindowW
CreatePropertySheetPage
ImageList_GetImageRect
CreateMappedBitmap
CreatePropertySheetPageW
DrawStatusTextW
InitCommonControlsEx
ImageList_DragLeave
DrawStatusText
ImageList_DragEnter
ImageList_DragShowNolock
ImageList_SetOverlayImage
ImageList_LoadImageW
comdlg32
ChooseFontW
user32
MessageBoxA
DrawTextExW
CharNextA
DefWindowProcA
SendDlgItemMessageW
FindWindowExA
ScrollWindow
RegisterClassW
LoadKeyboardLayoutW
CharToOemBuffA
LoadIconW
MoveWindow
CopyRect
GetWindowTextA
VkKeyScanExW
SetScrollRange
RegisterClassA
ReleaseDC
CreateWindowExW
GetAncestor
RegisterClassExA
DestroyWindow
CharNextW
SetWindowWord
ShowWindow
GetPropA
WaitForInputIdle
kernel32
GetCommandLineA
GetModuleFileNameA
SetFilePointer
LCMapStringW
EnumTimeFormatsW
VirtualProtect
GetStringTypeW
ReadFile
TlsAlloc
SetPriorityClass
GetSystemDirectoryA
GetProcAddress
GetModuleFileNameW
GetACP
OpenMutexA
EnumResourceLanguagesA
RemoveDirectoryA
GetCurrentProcessId
IsBadWritePtr
GetProfileStringA
GetCommandLineW
InterlockedExchange
GlobalAddAtomW
GetStdHandle
FreeEnvironmentStringsA
LeaveCriticalSection
SetLastError
GetSystemInfo
OutputDebugStringW
GetTimeZoneInformation
GetTickCount
GetStartupInfoA
SetHandleCount
GetEnvironmentStringsW
TlsFree
LocalFlags
LoadLibraryA
GetCurrentProcess
HeapReAlloc
GetEnvironmentStrings
GetCurrentThread
EnumSystemLocalesA
WaitNamedPipeA
VirtualFree
HeapSize
GetCurrentThreadId
GetStringTypeA
RtlFillMemory
WriteConsoleOutputW
VirtualQuery
GetUserDefaultLCID
GetShortPathNameA
HeapFree
FlushFileBuffers
GetCompressedFileSizeW
FreeEnvironmentStringsW
GetStartupInfoW
LCMapStringA
SetStdHandle
CompareStringA
CreateMutexA
TerminateProcess
CompareStringW
InitializeCriticalSection
IsValidCodePage
MultiByteToWideChar
ExitProcess
CloseHandle
TlsSetValue
TlsGetValue
VirtualAlloc
GetCPInfo
HeapDestroy
GetThreadContext
GetSystemTimeAsFileTime
HeapAlloc
GetFileType
OpenWaitableTimerA
LocalAlloc
GetLastError
GetModuleHandleA
HeapCreate
InterlockedExchangeAdd
EnterCriticalSection
GetTimeFormatA
IsValidLocale
RtlUnwind
UnhandledExceptionFilter
DeleteCriticalSection
SetThreadAffinityMask
GetVersionExA
WriteConsoleOutputCharacterW
LoadModule
WideCharToMultiByte
GetLocaleInfoA
SetEnvironmentVariableA
GetDateFormatA
GetLocaleInfoW
GetOEMCP
QueryPerformanceCounter
InterlockedDecrement
EnumDateFormatsExW
WriteFile
Sections
.text Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ