Static task
static1
Behavioral task
behavioral1
Sample
0fa43c3e390d609ae7c830058a9dfda8_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0fa43c3e390d609ae7c830058a9dfda8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0fa43c3e390d609ae7c830058a9dfda8_JaffaCakes118
-
Size
516KB
-
MD5
0fa43c3e390d609ae7c830058a9dfda8
-
SHA1
59d805f2ea5ee82535f26d39860d6d613be544ba
-
SHA256
6b194a780448df04b3c69ddd9a7f15571c3430e9057fe5652105f29f8c861af1
-
SHA512
05510ef68c987bc715b3e41ace884859a4e3c346e2ae106d6f9319faf7f7e920cbf801bb20ad08a680c7b84d23e9852147b6ba14da98bc37a66cd44ac72a1554
-
SSDEEP
12288:9UMDN1CIs89sKAkCfoK+QkzevHf/HdFfW2:9FsLKCfZvHf/Hr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fa43c3e390d609ae7c830058a9dfda8_JaffaCakes118
Files
-
0fa43c3e390d609ae7c830058a9dfda8_JaffaCakes118.exe windows:5 windows x86 arch:x86
8abf42530c67b59ad00b9978c7c2622d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadStringA
IsWindowVisible
GetSysColor
DialogBoxParamA
MessageBoxA
SetForegroundWindow
PostQuitMessage
ReleaseDC
IsWindow
GetDC
UnregisterClassA
SendMessageA
DestroyWindow
GetParent
UpdateWindow
DefWindowProcA
ShowWindow
EnableWindow
PeekMessageA
SetWindowPos
TranslateMessage
IsWindowEnabled
DrawTextA
GetSubMenu
CreateWindowExA
FillRect
DispatchMessageA
SetFocus
PostMessageA
BeginPaint
KillTimer
GetSystemMetrics
GetWindowRect
SetCapture
SetWindowLongA
EndDialog
SetWindowTextA
SetTimer
GetDlgItem
GetDesktopWindow
ole32
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
gdi32
SetBkColor
DeleteObject
GetDeviceCaps
GetStockObject
CreateCompatibleDC
CreateSolidBrush
SetBkMode
BitBlt
kernel32
RtlUnwind
GetEnvironmentStrings
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
WaitForSingleObject
GetDriveTypeA
FindFirstFileW
HeapDestroy
GetFileAttributesW
GetLocalTime
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
LocalAlloc
lstrcatA
CreateFileA
LoadLibraryExW
FreeEnvironmentStringsW
SetStdHandle
GetTempPathA
GetCPInfo
GetStringTypeA
WriteFile
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetFileAttributesA
GetOEMCP
LocalFree
GetExitCodeProcess
InitializeCriticalSection
LoadResource
GetLocaleInfoA
ResetEvent
VirtualAlloc
FindResourceA
Sleep
VirtualFree
HeapCreate
InterlockedExchange
GetModuleHandleW
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
WideCharToMultiByte
GetCommandLineW
GetCurrentProcessId
WritePrivateProfileStringA
SizeofResource
lstrlenW
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
CreateFileW
ExpandEnvironmentStringsA
FindNextFileA
GetDiskFreeSpaceA
FindFirstFileA
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileW
GetEnvironmentVariableA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
LoadLibraryW
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
GetVersion
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
CreateMutexA
MultiByteToWideChar
UnhandledExceptionFilter
SetHandleCount
lstrcmpiW
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
TlsGetValue
SetLastError
InterlockedDecrement
FindClose
GlobalLock
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 484KB - Virtual size: 482KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ