Static task
static1
Behavioral task
behavioral1
Sample
04fc280a8d40e0c904471762d83dff1b_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
04fc280a8d40e0c904471762d83dff1b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
04fc280a8d40e0c904471762d83dff1b_JaffaCakes118
-
Size
560KB
-
MD5
04fc280a8d40e0c904471762d83dff1b
-
SHA1
37e3aee2a11781b2f06145398e318918b2065a27
-
SHA256
048b22108b2fb341e59593a8663604a9092ddd1d448696445b53f86646fd1c66
-
SHA512
70c50d8427a4a92148ef5ddc3106b981792ae4938e803c248f84e46f7c8f3135064a97fabcc1e41d383c7f410c99c4a88e58bd5958b92b6dee24c45c0fdab55b
-
SSDEEP
6144:jHlNKxWsnbRsOkV0eEaA5mQtdyy13jeHUlJgy2QeRIw8/oEN8wjD5Q16:LlNKx7bRbeEnAGdx13jKjQejylN8R0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04fc280a8d40e0c904471762d83dff1b_JaffaCakes118
Files
-
04fc280a8d40e0c904471762d83dff1b_JaffaCakes118.exe windows:4 windows x86 arch:x86
32887a45778b48d9b50d2228b088cb74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
GetModuleHandleA
InterlockedDecrement
FreeEnvironmentStringsW
ReadFile
LCMapStringA
TlsFree
HeapFree
CloseHandle
EnumSystemLocalesA
TlsGetValue
GetCurrentThread
WriteConsoleA
LeaveCriticalSection
GetEnvironmentStrings
HeapCreate
CreateFileA
FreeEnvironmentStringsA
GetCurrentProcess
FreeLibrary
OutputDebugStringW
GetStringTypeA
HeapReAlloc
VirtualFree
CreateMutexA
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetCommandLineA
RtlMoveMemory
SetLastError
GetFileType
RtlUnwind
GetTickCount
lstrcpy
GetLocaleInfoA
GetCurrentThreadId
SetConsoleMode
GetCPInfo
ExitProcess
FlushFileBuffers
GetStdHandle
IsValidCodePage
EnumCalendarInfoExW
HeapSize
GetStringTypeW
Sleep
GetModuleFileNameA
QueryPerformanceCounter
GetUserDefaultLCID
IsDebuggerPresent
SetStdHandle
GetLastError
InterlockedExchange
SetFilePointer
FindResourceW
GetConsoleMode
LCMapStringW
GlobalFlags
SetConsoleCtrlHandler
WideCharToMultiByte
GetLocaleInfoW
EnterCriticalSection
LoadLibraryA
GetStartupInfoW
GetEnvironmentStringsA
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCompressedFileSizeA
HeapAlloc
GetACP
GetDateFormatA
SetUnhandledExceptionFilter
OpenMutexA
TlsAlloc
GetTimeZoneInformation
EnumDateFormatsExW
MultiByteToWideChar
GetTimeFormatA
CompareStringW
GetEnvironmentStringsW
GetPrivateProfileStringW
WriteConsoleW
WriteFile
HeapDestroy
GetCurrentProcessId
GetProfileIntA
SetEnvironmentVariableA
GetConsoleOutputCP
CreateMailslotW
VirtualQuery
SetHandleCount
IsValidLocale
CompareStringA
TerminateProcess
TlsSetValue
DeleteCriticalSection
GetProcAddress
VirtualAlloc
GetStartupInfoA
InterlockedIncrement
GetModuleHandleW
user32
RegisterClassA
RegisterClassExA
UnhookWindowsHookEx
CharToOemBuffA
ReplyMessage
CallWindowProcW
DrawIconEx
CharLowerBuffW
InternalGetWindowText
ShowCursor
CloseWindow
FindWindowExW
SetWindowPos
DrawStateW
CreateMenu
GetTabbedTextExtentW
ChangeDisplaySettingsExA
DdeSetQualityOfService
wininet
InternetAutodial
comctl32
InitCommonControlsEx
Sections
.text Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 315KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ