Static task
static1
Behavioral task
behavioral1
Sample
0b1cc3d2e810efb654a0d6ce685d5ebf_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0b1cc3d2e810efb654a0d6ce685d5ebf_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0b1cc3d2e810efb654a0d6ce685d5ebf_JaffaCakes118
-
Size
469KB
-
MD5
0b1cc3d2e810efb654a0d6ce685d5ebf
-
SHA1
542161306eb8a413471c191a80ef4f059a6b4521
-
SHA256
8d1af1b55af9edc8c8667c63ea437967b468ec1919016a8fcbef43fb6a323063
-
SHA512
a62c29d8b9d8548186eb30a620990a35a2b05e7c0819bf782b888a16dc9724b64478fefd8edfa6b0b2ab1ae978895c6b1304e22556c3229f4f678ee4c1727da9
-
SSDEEP
12288:oZOh3PAC5rLl/pQ2yHxN3PJfkpik8Gmiv25SpixQr:+7IXjyHb3PJEOtippixQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b1cc3d2e810efb654a0d6ce685d5ebf_JaffaCakes118
Files
-
0b1cc3d2e810efb654a0d6ce685d5ebf_JaffaCakes118.exe windows:4 windows x86 arch:x86
dfe4b17203f5d6d43c8e44d10349e0fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
LocalFree
VirtualFree
CreateProcessA
GetStringTypeW
ResetEvent
UnhandledExceptionFilter
DeleteFileA
SetCurrentDirectoryA
DeleteCriticalSection
SetEnvironmentVariableA
UnmapViewOfFile
LocalAlloc
InterlockedCompareExchange
FindClose
GlobalUnlock
GlobalFree
WriteConsoleA
GetEnvironmentStringsW
CreateProcessW
TlsSetValue
HeapReAlloc
VirtualAlloc
GlobalLock
GlobalAlloc
InterlockedExchange
QueryPerformanceCounter
GetProcAddress
LoadLibraryExA
ReleaseMutex
CreateEventA
HeapFree
ReadFile
GetLocalTime
EnterCriticalSection
GetSystemTimeAsFileTime
CompareStringA
lstrcmpiW
CreateDirectoryA
SetUnhandledExceptionFilter
GetStdHandle
TerminateProcess
FindFirstFileA
TlsFree
GetStringTypeA
lstrcatA
lstrcpynA
LockResource
LoadResource
FindResourceW
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetConsoleOutputCP
lstrcmpA
LCMapStringW
WideCharToMultiByte
lstrlenW
CompareStringW
MulDiv
lstrcmpiA
GetSystemInfo
FreeEnvironmentStringsA
GetEnvironmentStrings
SetEvent
CreateThread
TlsGetValue
FindNextFileW
SetFileTime
SetStdHandle
WriteFile
LCMapStringA
GetLocaleInfoA
MultiByteToWideChar
GetCurrentThreadId
GetThreadLocale
SetHandleCount
GetDriveTypeA
WriteConsoleW
MapViewOfFile
FormatMessageW
GetFileAttributesW
WaitForSingleObject
GetCurrentThread
ExpandEnvironmentStringsA
GetTempPathA
CreateFileMappingA
GetTickCount
GetVersion
CreateFileA
GetFileType
CreateMutexA
FindNextFileA
GetACP
FileTimeToLocalFileTime
HeapDestroy
GetProcessHeap
lstrlenA
SetErrorMode
Sleep
WaitForMultipleObjects
GetEnvironmentVariableA
FreeEnvironmentStringsW
SetFilePointer
GetCurrentDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryA
GetCurrentProcessId
HeapAlloc
GetModuleFileNameW
GetFileAttributesA
LoadLibraryExW
HeapCreate
HeapSize
VirtualQuery
GetFileSize
GetConsoleCP
GetConsoleMode
GetCurrentProcess
SetEndOfFile
FindFirstFileW
FreeLibrary
GetModuleHandleA
GetStartupInfoA
InterlockedIncrement
GetCommandLineA
FormatMessageA
GetTimeZoneInformation
GetModuleFileNameA
GetLastError
LoadLibraryW
SizeofResource
FindResourceA
LoadLibraryA
TlsAlloc
ExitProcess
InterlockedDecrement
InitializeCriticalSection
LeaveCriticalSection
VirtualProtect
GetCommandLineW
SetLastError
GetSystemTime
lstrcpyA
GetVersionExA
CloseHandle
GetVersionExW
FileTimeToSystemTime
IsDebuggerPresent
RaiseException
GetExitCodeProcess
GetCPInfo
CreateEventW
DeleteFileW
user32
PostQuitMessage
GetClientRect
CallWindowProcA
GetWindowLongA
ShowWindow
LoadCursorA
PeekMessageA
SystemParametersInfoA
TranslateMessage
SetWindowPos
BeginPaint
LoadIconA
ReleaseDC
GetSystemMetrics
FillRect
GetDC
GetSysColor
IsWindow
GetDesktopWindow
MessageBoxA
SetFocus
CreateWindowExA
SetForegroundWindow
GetParent
GetWindowRect
ClientToScreen
GetWindow
GetFocus
CheckMenuItem
GetSubMenu
SendMessageA
PostMessageA
IsWindowVisible
EndDialog
GetKeyState
LoadBitmapA
RegisterClassA
TrackPopupMenu
DispatchMessageA
UpdateWindow
GetCursorPos
EnableMenuItem
SetWindowTextA
EndPaint
MessageBeep
MoveWindow
IsIconic
EnableWindow
DestroyWindow
SetWindowLongA
SetCursor
DefWindowProcA
GetDlgItem
InvalidateRect
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExA
RegQueryValueExW
RegDeleteKeyW
RegQueryValueExA
RegCloseKey
gdi32
GetDeviceCaps
SelectObject
GetStockObject
CreateCompatibleDC
DeleteObject
oleaut32
SysFreeString
SysAllocStringLen
SysAllocString
ole32
CoInitialize
CoUninitialize
msvcrt
free
Sections
asoyo Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE