Static task
static1
Behavioral task
behavioral1
Sample
06528afc6f76dee5806d181773189f03_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
06528afc6f76dee5806d181773189f03_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
06528afc6f76dee5806d181773189f03_JaffaCakes118
-
Size
448KB
-
MD5
06528afc6f76dee5806d181773189f03
-
SHA1
ed6e44b6e819b611a7c24ae8b194e7b635fc9637
-
SHA256
954853dfdee341304f86c1510fdcb5404b1ff2b7e19b9a46629de72374021048
-
SHA512
181768b952fd9639ec4b902d87a4986a43fb70807a6a70e16c031f67003c910fa6476cc982edf628e7eecaea6ce2e26e60eaa59504b4a9a857fada3d49c1b7a4
-
SSDEEP
6144:4TgENSbY9KkKqIbjFZmB8Owsy6+2ptL3Y9hxV72lwAQ0C2ZyHriwpnEtI5lIPdyC:4sESyyRj0I2+DV7UQ0tyxpnEOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06528afc6f76dee5806d181773189f03_JaffaCakes118
Files
-
06528afc6f76dee5806d181773189f03_JaffaCakes118.exe windows:4 windows x86 arch:x86
29656643dd221a82d178953c8b98f7ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleW
wininet
InternetAlgIdToStringA
InternetSetOptionA
shell32
SHFormatDrive
SHGetDataFromIDListW
RealShellExecuteA
user32
CharToOemBuffA
GetWindowTextLengthW
InsertMenuA
CheckDlgButton
AnyPopup
SetWindowLongW
DlgDirSelectComboBoxExW
SetWindowRgn
SetDeskWallpaper
ScrollDC
SetTimer
SetMenuItemInfoW
GetMonitorInfoA
ChangeClipboardChain
GetMenuCheckMarkDimensions
ReplyMessage
CopyImage
ClipCursor
WINNLSGetEnableStatus
ChangeMenuW
IsWindowEnabled
GetTabbedTextExtentW
SetMenuItemBitmaps
DrawFocusRect
GetQueueStatus
gdi32
AngleArc
GetMetaFileBitsEx
GetColorSpace
GetCharABCWidthsFloatW
CreatePolygonRgn
EnumICMProfilesA
RoundRect
PolyBezier
CreateBitmap
CreateBitmapIndirect
GetBitmapBits
DeleteDC
GetCharWidthFloatW
GetStretchBltMode
ColorCorrectPalette
FillRgn
OffsetClipRgn
CloseFigure
OffsetRgn
kernel32
GetFileType
GetConsoleOutputCP
LoadLibraryA
GetEnvironmentStringsW
GetEnvironmentStrings
LCMapStringW
GetProcessHeap
GetStringTypeA
SetCurrentDirectoryW
FreeEnvironmentStringsW
GetCurrentThreadId
FindResourceExW
TlsFree
GetACP
SetLastError
TerminateProcess
GetStartupInfoA
HeapAlloc
GetVersionExA
GetEnvironmentVariableW
TlsSetValue
WriteFile
FileTimeToLocalFileTime
GetTimeFormatA
GetLocaleInfoA
WideCharToMultiByte
VirtualFree
HeapCreate
GetUserDefaultLCID
GetModuleFileNameA
SetEnvironmentVariableA
HeapFree
GetOEMCP
SetVolumeLabelA
TlsGetValue
VirtualAlloc
GetLastError
HeapSize
GetStdHandle
CompareStringW
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LockFileEx
GetTimeZoneInformation
CommConfigDialogA
Sleep
InterlockedDecrement
ExpandEnvironmentStringsW
SetHandleCount
SetConsoleCtrlHandler
CompareStringA
GetCommandLineA
HeapDestroy
IsValidLocale
IsValidCodePage
DeleteCriticalSection
CreatePipe
InterlockedIncrement
GetProcAddress
GetModuleHandleA
CreateDirectoryA
InterlockedExchange
IsDebuggerPresent
WritePrivateProfileStructA
FindClose
CommConfigDialogW
FreeLibrary
TlsAlloc
GetStringTypeW
GetSystemInfo
QueryPerformanceCounter
LeaveCriticalSection
GetSystemTimeAsFileTime
VirtualQuery
GetComputerNameW
UnhandledExceptionFilter
GetCurrentProcess
lstrcat
GetPrivateProfileStructW
EnumSystemLocalesA
SetUnhandledExceptionFilter
GetCurrentThread
GetTickCount
CreateProcessW
GetDateFormatA
GetCurrentProcessId
FreeEnvironmentStringsA
ExitProcess
EnterCriticalSection
RtlUnwind
InitializeCriticalSection
GetLocaleInfoW
GetCPInfo
GetCurrentDirectoryA
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ