Static task
static1
Behavioral task
behavioral1
Sample
00d646a85632fd12c18a5ee7be302804_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
00d646a85632fd12c18a5ee7be302804_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
00d646a85632fd12c18a5ee7be302804_JaffaCakes118
-
Size
433KB
-
MD5
00d646a85632fd12c18a5ee7be302804
-
SHA1
87f808ce7594c9db12ed6149121f7773fa28c189
-
SHA256
10fa579d3f985c21fbf53b89f5b653d0872ce7e23f1347bb345fc501bd1d5fd1
-
SHA512
a53ab44b759955228db50efac85c09d72f2cf19436f3dc26c3e48c0284f44204e5bd6326b8a40445303e28ff9a8c4739ee6b0d1ffe3fdaca80cea9eca885dd67
-
SSDEEP
12288:26eBTcy2z85mH9XsYf+k7mUA+2NFuehtigto:26eBTcy2z8mWOHA3I2xto
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 00d646a85632fd12c18a5ee7be302804_JaffaCakes118
Files
-
00d646a85632fd12c18a5ee7be302804_JaffaCakes118.exe windows:5 windows x86 arch:x86
1cbb1083ed50cbdf6b932882a58b66c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
closesocket
bind
WSACancelBlockingCall
WSACleanup
accept
WSAUnhookBlockingHook
kernel32
GetStartupInfoA
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
RaiseException
WriteFile
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
CompareStringW
SetEnvironmentVariableA
HeapSize
GetLocaleInfoA
GetModuleHandleW
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
lstrlenA
ReadProcessMemory
GetModuleFileNameW
lstrlenW
WriteProcessMemory
TerminateProcess
AddAtomW
CloseHandle
FindNextChangeNotification
GetCurrentProcess
GetModuleHandleA
lstrcmpA
Sleep
TlsGetValue
FindVolumeClose
FindNextVolumeMountPointA
TerminateJobObject
CreateFiberEx
CompareStringA
AddAtomA
FindNextVolumeMountPointW
GetCommandLineA
CreateFiber
GetAtomNameW
TerminateThread
FlushViewOfFile
IsDBCSLeadByteEx
LoadLibraryA
GetProcAddress
FindVolumeMountPointClose
OutputDebugStringA
GetModuleFileNameA
lstrcpyA
OutputDebugStringW
AreFileApisANSI
CreateMutexA
GetLastError
lstrcmpiA
lstrcatA
CreateThread
AllocateUserPhysicalPages
GenerateConsoleCtrlEvent
WaitForSingleObject
GetACP
FreeResource
FreeEnvironmentStringsW
ExitProcess
RtlUnwind
user32
TabbedTextOutW
VkKeyScanA
FreeDDElParam
keybd_event
GetActiveWindow
AnimateWindow
DrawFocusRect
DlgDirListComboBoxW
UpdateWindow
VkKeyScanExA
DrawIconEx
EndMenu
SetWindowTextW
mouse_event
ArrangeIconicWindows
DlgDirListW
DialogBoxParamW
MessageBoxA
DragObject
FlashWindow
DestroyMenu
ExcludeUpdateRgn
DialogBoxParamA
ShowScrollBar
TrackPopupMenuEx
SetWindowWord
SwitchDesktop
GetCaretBlinkTime
MessageBoxW
GetAltTabInfoA
UnloadKeyboardLayout
GetCaretPos
VkKeyScanExW
GetAncestor
EnableScrollBar
UpdateLayeredWindow
GetAltTabInfoW
EmptyClipboard
DlgDirSelectComboBoxExW
DestroyIcon
gdi32
MoveToEx
SetSystemPaletteUse
GetTextMetricsW
CreateDiscardableBitmap
GetPolyFillMode
SetTextCharacterExtra
PolyBezier
SetMapMode
GetObjectType
SetViewportExtEx
CheckColorsInGamut
CreateEnhMetaFileW
GetObjectA
PaintRgn
GetWindowOrgEx
CreateHatchBrush
GetLogColorSpaceW
GetMetaFileBitsEx
SetTextJustification
SetDIBColorTable
SetGraphicsMode
PolyDraw
PathToRegion
CreatePen
ColorMatchToTarget
UnrealizeObject
UpdateICMRegKeyW
GetPath
GetTextCharacterExtra
GetMapMode
PlayMetaFile
CloseFigure
GetICMProfileW
MaskBlt
CreateCompatibleDC
GetMetaRgn
CombineTransform
OffsetViewportOrgEx
StrokePath
OffsetRgn
BitBlt
SetMapperFlags
SetDeviceGammaRamp
PlgBlt
GetStockObject
RemoveFontResourceA
CreatePolyPolygonRgn
SetMiterLimit
SetMetaRgn
CancelDC
ColorCorrectPalette
SetAbortProc
AbortPath
GetWinMetaFileBits
SetPixel
shell32
SHGetFileInfoA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ