Static task
static1
Behavioral task
behavioral1
Sample
0673474c861609468dffaee91b946735_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0673474c861609468dffaee91b946735_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0673474c861609468dffaee91b946735_JaffaCakes118
-
Size
580KB
-
MD5
0673474c861609468dffaee91b946735
-
SHA1
18b5888638d248e572727c3f385464250e8f478d
-
SHA256
c7c231628605091ad5b19d46e6214fadabbd8aa62010e104f85876fd7d728861
-
SHA512
05103062e5b578da0a9399a6ab37dc6aba2ef53d32793ca5b347b1acff3188151738cdfdde57a026c326a0eb4aa7ea15bfdbfa47a92ec2dcbf87625c4934bb92
-
SSDEEP
12288:w5wm2hEHiqA6mapBKG3BXcmVzHzF6VcK71Oc3Ty3:w5wzGvm0BXLVzT4WKhOk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0673474c861609468dffaee91b946735_JaffaCakes118
Files
-
0673474c861609468dffaee91b946735_JaffaCakes118.exe windows:5 windows x86 arch:x86
ea122a5dbbc6caac78b8c8855944da01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
kernel32
ExitProcess
VirtualAlloc
Sleep
VirtualFree
HeapCreate
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
RaiseException
GetCurrentDirectoryA
LockResource
GetCurrentProcessId
SizeofResource
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GetConsoleCP
GetSystemInfo
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
CreateEventA
ExpandEnvironmentStringsA
WaitForMultipleObjects
FindFirstFileW
CompareStringA
FindFirstFileA
GetProcAddress
DeleteFileA
GetFileSize
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
GetVersion
InterlockedDecrement
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
GetStartupInfoA
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetPrivateProfileStringA
GetModuleFileNameA
GetVersionExA
IsDebuggerPresent
InitializeCriticalSection
SetLastError
TlsGetValue
FindClose
LoadResource
GetEnvironmentVariableA
GetStringTypeW
HeapReAlloc
WriteFile
GetStringTypeA
GetCPInfo
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindNextFileA
GetDriveTypeA
GetFileAttributesA
GetConsoleOutputCP
GetProcessHeap
GetCommandLineA
TerminateProcess
WideCharToMultiByte
GetEnvironmentStrings
GetStdHandle
GetFileType
RtlUnwind
LCMapStringW
user32
PostQuitMessage
SetForegroundWindow
LoadBitmapA
SetCursor
GetClientRect
wsprintfA
IsWindowVisible
SystemParametersInfoA
GetSysColor
GetDesktopWindow
ScreenToClient
GetDlgItem
CreateWindowExA
IsIconic
SetFocus
FillRect
SetTimer
EnableMenuItem
ShowWindow
GetMessageA
DestroyWindow
SendMessageA
GetDC
EndPaint
IsWindow
SetWindowPos
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 524KB - Virtual size: 522KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ