Static task
static1
Behavioral task
behavioral1
Sample
0b2eaf582177b40c81f7058512fbede0_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0b2eaf582177b40c81f7058512fbede0_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0b2eaf582177b40c81f7058512fbede0_JaffaCakes118
-
Size
72KB
-
MD5
0b2eaf582177b40c81f7058512fbede0
-
SHA1
e2d0427545050a35a32b305e08d036f6ef1fca5c
-
SHA256
0df240f877024dd1b637d6d30ed80b9b2f5ff410a15f7c633ac8bdfa91f03f77
-
SHA512
bfac1ffedd019c0432792f963dae81cea24df80f8b2002c907f77cd3a871a3ad0e47551b43385dc21a563e812d654ac0d75fdccc30a9d8883cbeef0cd8435b32
-
SSDEEP
1536:hkTDalwMH0N1aqsUCwaiRgGEdWQkMfloH+gVZQ:kcC8qkwbGtkMNoHJVZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b2eaf582177b40c81f7058512fbede0_JaffaCakes118
Files
-
0b2eaf582177b40c81f7058512fbede0_JaffaCakes118.exe windows:4 windows x86 arch:x86
23af6ee19c41566f02b7d07363ffb59b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
FindFirstFileA
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
LeaveCriticalSection
EnterCriticalSection
FlushInstructionCache
WideCharToMultiByte
CreateDirectoryA
GetTempPathA
FindClose
FindNextFileA
DeleteFileA
FreeLibrary
WinExec
GetTempFileNameA
WriteFile
LocalFree
LocalUnlock
CloseHandle
ReadFile
LocalLock
LocalAlloc
GetFileSize
CreateFileA
lstrlenW
MultiByteToWideChar
GetModuleFileNameA
GetShortPathNameA
lstrlenA
InterlockedDecrement
GetCommandLineA
GetCurrentThreadId
lstrcmpiA
GetCurrentProcess
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStrings
GetStartupInfoA
GetModuleHandleA
GetVersion
HeapReAlloc
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
RtlUnwind
GetStringTypeA
SetUnhandledExceptionFilter
IsBadReadPtr
GetStringTypeW
GetCPInfo
GetOEMCP
ExitProcess
GetACP
IsBadCodePtr
GetFileType
user32
GetMessageA
CreateDialogParamA
SetWindowLongA
DispatchMessageA
PostThreadMessageA
CharNextA
MessageBoxA
LoadStringA
WinHelpA
DialogBoxParamA
EndDialog
ShowWindow
DdeNameService
DestroyWindow
DdeInitializeA
DdeConnect
wsprintfA
DdeCreateStringHandleA
DdeUnaccessData
DdeClientTransaction
DdeAccessData
CreatePopupMenu
DdeDisconnect
DdeFreeStringHandle
AppendMenuA
EnableMenuItem
SetForegroundWindow
TrackPopupMenu
PostMessageA
DestroyMenu
LoadIconA
DestroyIcon
DdeUninitialize
PostQuitMessage
GetCursorPos
DdeQueryStringA
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CoRevokeClassObject
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemRealloc
CoRegisterClassObject
CoTaskMemAlloc
oleaut32
SysAllocString
LoadTypeLi
SysFreeString
VarUI4FromStr
RegisterTypeLi
urlmon
URLDownloadToFileA
ssiutils
GetSystranProfileString
GetSystranProfileDWord
GetSystranProfileInt
ssistdop
TranslateFile
GetOptions
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE