Static task
static1
Behavioral task
behavioral1
Sample
06da6d612d1b2a066b5cc01da3702c0e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06da6d612d1b2a066b5cc01da3702c0e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
06da6d612d1b2a066b5cc01da3702c0e_JaffaCakes118
-
Size
164KB
-
MD5
06da6d612d1b2a066b5cc01da3702c0e
-
SHA1
210dd2bba5cc77e5a64c10b566bef857cd98e103
-
SHA256
cbac316dc0f37fd4e73ac2ca4511f76d05168929c40671c05fe9406668119447
-
SHA512
cde60d9b752e1109e6c8d4cd7ec1480bc52309391d57a84998d60898c729ccfc06b249b696a269a333e9ea3d94ebb97a1aabccfa3845e5ea97abe86e29d6a4c8
-
SSDEEP
1536:u0Euu6lQ+8Gg28RGwv+aMqj00yrxR98e7nxphBE4MCqOYsp8pkyt4V22OojLa20i:M9F0jv9P7nxrS9CqwRV27oq1cgY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06da6d612d1b2a066b5cc01da3702c0e_JaffaCakes118
Files
-
06da6d612d1b2a066b5cc01da3702c0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
fcf71089a220076d6365ca22805a1a6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
FindNextFileA
UnmapViewOfFile
ExitThread
LoadLibraryA
GetLastError
FindClose
GetProcAddress
SystemTimeToFileTime
Sleep
IsDBCSLeadByte
ResumeThread
SuspendThread
SetFileTime
SetFileAttributesA
CreateDirectoryA
GetFileAttributesA
GetSystemTime
GetFileSize
FreeLibrary
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
GetTickCount
CreateThread
GetFullPathNameA
CreateFileA
SetFilePointer
WriteFile
GetCurrentDirectoryA
GetWindowsDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetFileInformationByHandle
GetLocalTime
GetComputerNameA
HeapFree
GetStartupInfoA
GetCommandLineA
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
HeapDestroy
HeapCreate
GetVersionExA
VirtualAlloc
VirtualFree
GetCurrentProcess
WideCharToMultiByte
TerminateProcess
LCMapStringA
LCMapStringW
MultiByteToWideChar
FreeEnvironmentStringsA
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetStringTypeA
GetOEMCP
GetStringTypeW
GetCPInfo
GetACP
HeapReAlloc
GetEnvironmentStrings
GetEnvironmentStringsW
GetVersion
HeapAlloc
user32
TranslateMessage
GetMessageA
DispatchMessageA
SetDlgItemTextA
DefWindowProcA
DialogBoxParamA
IsDialogMessageA
ScreenToClient
DestroyWindow
CreateDialogParamA
EndDialog
UpdateWindow
GetDlgItemTextA
BringWindowToTop
SystemParametersInfoA
AttachThreadInput
GetWindowThreadProcessId
IsWindowEnabled
DeferWindowPos
SetWindowWord
ReleaseCapture
IsWindow
GetWindowRect
CallWindowProcA
LoadMenuA
GetSubMenu
GetMenuItemCount
GetMenuStringA
SetWindowLongA
CreatePopupMenu
ModifyMenuA
BeginDeferWindowPos
AppendMenuA
DestroyMenu
GetAsyncKeyState
KillTimer
SetTimer
RegisterWindowMessageA
LoadAcceleratorsA
GetSystemMetrics
SendMessageA
PostQuitMessage
LoadIconA
LoadCursorA
GetParent
GetDlgItem
SendDlgItemMessageA
GetClientRect
CreateWindowExA
GetWindowLongA
GetWindow
PeekMessageA
EndDeferWindowPos
IsWindowVisible
IsDlgButtonChecked
SetActiveWindow
GetForegroundWindow
RegisterHotKey
FindWindowA
RegisterClassA
SetForegroundWindow
MessageBoxA
wsprintfA
InvalidateRgn
GetWindowTextA
PostMessageA
UnregisterHotKey
SetCursor
GetWindowPlacement
EnableWindow
ShowWindow
SetClassLongA
SetWindowPlacement
SetFocus
GetMessagePos
FlashWindow
SetWindowTextA
CreateMenu
TrackPopupMenu
MessageBeep
GetSystemMenu
InsertMenuA
GetMenuItemID
GetWindowWord
DeleteMenu
MoveWindow
GetCursorPos
SetCapture
TranslateAcceleratorA
gdi32
CreateFontIndirectA
DeleteObject
GetObjectA
comdlg32
GetSaveFileNameA
ChooseFontA
GetOpenFileNameA
advapi32
RegDeleteKeyA
GetUserNameA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
shell32
DragFinish
SHGetMalloc
DragQueryFileA
SHGetPathFromIDListA
ExtractIconA
SHBrowseForFolderA
Shell_NotifyIconA
ShellExecuteA
ole32
CoInitialize
CoUninitialize
winmm
PlaySoundA
comctl32
ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
wsock32
accept
recvfrom
connect
ntohl
sendto
WSACleanup
WSAStartup
socket
bind
WSAAsyncSelect
inet_ntoa
listen
WSAGetLastError
send
recv
closesocket
gethostbyname
inet_addr
ioctlsocket
htons
setsockopt
select
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ