Static task
static1
Behavioral task
behavioral1
Sample
06f91ac721695be2edad5be6d6ed99e9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06f91ac721695be2edad5be6d6ed99e9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
06f91ac721695be2edad5be6d6ed99e9_JaffaCakes118
-
Size
490KB
-
MD5
06f91ac721695be2edad5be6d6ed99e9
-
SHA1
20b950f591a68a3a6d78987c73063f8c472b96dc
-
SHA256
75d8c941fc05e4ed2b21a42cba3728b5ca8e2fe96d0c109bf0265a2a7b29e426
-
SHA512
5fc0dcf694f0df6fcc16173354c19a3507e023fcd30957e596e94518d60573451f66c245a3a29116e8a6cfa27d8cfc2f2fd5e48b55a0c60ddad05f7a5dd9631d
-
SSDEEP
12288:OiBj0w1EkAdL/UhyUsom9jLVFeH32dk24gZYuy:O4j0wHAp0lsom9LVAHGdk2Muy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06f91ac721695be2edad5be6d6ed99e9_JaffaCakes118
Files
-
06f91ac721695be2edad5be6d6ed99e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
8e4f8ebf664618cfff0f7aff89d76e84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetFindNextFileW
RetrieveUrlCacheEntryFileA
InternetCloseHandle
InternetTimeFromSystemTime
IsUrlCacheEntryExpiredA
FindNextUrlCacheEntryA
LoadUrlCacheContent
InternetQueryDataAvailable
FtpPutFileW
comctl32
InitCommonControlsEx
shell32
SHFileOperationA
SheChangeDirA
SheChangeDirExW
SHInvokePrinterCommandW
DragQueryFileA
gdi32
PathToRegion
kernel32
GetLastError
WaitNamedPipeW
TlsAlloc
FindResourceA
SetFilePointer
LoadLibraryA
WriteConsoleInputW
ReadFile
HeapAlloc
GetFileType
GetCurrentThread
SetLastError
SetFileAttributesA
FreeEnvironmentStringsW
SetStdHandle
ExitProcess
GetProcAddress
FreeEnvironmentStringsA
HeapReAlloc
TlsGetValue
GetEnvironmentStringsW
GetCurrentProcessId
FlushFileBuffers
CreateEventW
IsBadReadPtr
HeapCreate
TlsFree
LoadModule
FillConsoleOutputCharacterW
GetStringTypeA
OpenMutexW
InitializeCriticalSection
GetCommandLineA
HeapDestroy
GetWindowsDirectoryA
LeaveCriticalSection
FillConsoleOutputAttribute
GetSystemTime
CreateEventA
GetStartupInfoW
WideCharToMultiByte
WriteProfileSectionW
InterlockedDecrement
GetLocalTime
VirtualQuery
GetStdHandle
GetTimeZoneInformation
GetVersion
TransmitCommChar
UnhandledExceptionFilter
CreateMutexA
GetFileAttributesW
VirtualUnlock
GetSystemTimeAsFileTime
GetModuleFileNameA
GetStringTypeW
GetModuleHandleA
VirtualFree
InterlockedIncrement
SetEnvironmentVariableA
VirtualLock
GetTickCount
OpenMutexA
VirtualAlloc
WriteFile
GetModuleFileNameW
CompareStringW
GetCommandLineW
GlobalFix
QueryPerformanceCounter
SetThreadPriority
GetEnvironmentStrings
EnterCriticalSection
CompareStringA
SetHandleCount
GetStartupInfoA
OpenWaitableTimerA
LCMapStringA
TlsSetValue
TerminateProcess
CopyFileExA
GetCPInfo
GetCurrentThreadId
LCMapStringW
InterlockedExchange
DeleteCriticalSection
RtlUnwind
HeapFree
MultiByteToWideChar
GetCurrentProcess
IsBadWritePtr
CloseHandle
user32
MessageBoxA
LoadBitmapA
GetSystemMenu
DdeClientTransaction
EnableMenuItem
GetMenuCheckMarkDimensions
CallMsgFilter
GetWindowModuleFileNameA
SetMenuDefaultItem
IsChild
GetMessageTime
DefMDIChildProcW
GetCursorInfo
RegisterClassExA
GetClassNameW
GetDialogBaseUnits
MapVirtualKeyW
RegisterClassA
WINNLSGetEnableStatus
DrawIconEx
GetKeyboardLayoutNameA
AdjustWindowRect
GetLastActivePopup
CascadeWindows
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ