Static task
static1
Behavioral task
behavioral1
Sample
0ff658ae182ca14e01c1a62a8b6d0ca5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ff658ae182ca14e01c1a62a8b6d0ca5_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0ff658ae182ca14e01c1a62a8b6d0ca5_JaffaCakes118
-
Size
584KB
-
MD5
0ff658ae182ca14e01c1a62a8b6d0ca5
-
SHA1
3f3b6ccb3b1a29f5b1295e29b8746fa4aa2949b9
-
SHA256
1b85537b952fb1c6a1a17b5c4619a47e8652cde1becae1ad91386db922f3521a
-
SHA512
53e0e21d80801f8015ee0f132da3af5ea7656919c0e38ea2721007d991dfb1d0f1abd75ee8d76799eed74c32fa0a8c7add0d6383e6a0b743cd3767e46c800607
-
SSDEEP
12288:5oQEswfBOqbCVYNIrQgToA4vyP6tqLN8451DNH5W4kW:5oQEswfBO2CVYNIrQkoAY2Qz4LNwE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff658ae182ca14e01c1a62a8b6d0ca5_JaffaCakes118
Files
-
0ff658ae182ca14e01c1a62a8b6d0ca5_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ae1674dedef498b2729a48b599530e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
GetVersion
TlsGetValue
GetSystemInfo
WaitForDebugEvent
CreateDirectoryW
EnumSystemLocalesA
AllocConsole
GetTickCount
GetNamedPipeHandleStateW
GetStdHandle
LocalSize
FlushConsoleInputBuffer
GetCommandLineA
TlsFree
SetConsoleCursorPosition
LockFile
GetCurrentThreadId
MoveFileExW
TlsAlloc
GetStartupInfoA
VirtualAlloc
InterlockedDecrement
GetOEMCP
GetShortPathNameA
GetCurrentThread
DebugActiveProcess
CloseHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FindClose
WritePrivateProfileStructW
TryEnterCriticalSection
SetCriticalSectionSpinCount
VirtualQuery
GetStringTypeW
LocalHandle
GetFileTime
CopyFileA
WaitForSingleObject
GetCPInfo
MultiByteToWideChar
GetCompressedFileSizeW
RtlUnwind
GetEnvironmentStringsW
WaitForMultipleObjects
GetCurrentProcessId
TerminateProcess
GetACP
GetTimeFormatW
lstrcmpi
GlobalGetAtomNameA
OpenMutexW
ExitProcess
GetModuleHandleA
WriteFile
SetConsoleCtrlHandler
CreateFileMappingW
SystemTimeToTzSpecificLocalTime
LoadModule
VirtualProtectEx
lstrcpyW
ReadFile
QueryPerformanceCounter
VirtualFreeEx
SleepEx
OpenMutexA
GetCurrentProcess
GetSystemTime
GetStringTypeExW
SetComputerNameW
SetEnvironmentVariableA
GetTimeZoneInformation
CompareStringW
GetSystemTimeAsFileTime
CreateMutexA
EnumResourceTypesW
SetWaitableTimer
GetVersionExA
SetStdHandle
MoveFileExA
GetProfileIntA
InterlockedIncrement
GetEnvironmentStrings
IsBadWritePtr
VirtualQueryEx
InterlockedExchange
SetFilePointer
SetHandleCount
LocalLock
CreateWaitableTimerA
GetPrivateProfileStructW
EnumResourceTypesA
FlushFileBuffers
lstrcpy
LCMapStringA
LoadLibraryA
HeapReAlloc
WideCharToMultiByte
GetPrivateProfileSectionNamesA
GetStringTypeA
LCMapStringW
EnterCriticalSection
SetSystemTime
DeleteCriticalSection
GetProcAddress
SetLastError
VirtualAllocEx
SetEndOfFile
UnhandledExceptionFilter
GetDiskFreeSpaceW
HeapFree
ExitThread
GetTempFileNameW
EnumDateFormatsExA
TlsSetValue
LeaveCriticalSection
GetPriorityClass
FileTimeToLocalFileTime
HeapAlloc
CompareStringA
PulseEvent
OutputDebugStringA
WritePrivateProfileSectionA
HeapCreate
GetProfileStringA
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileType
VirtualFree
InitializeCriticalSection
user32
SetWindowsHookA
GetMenuContextHelpId
DlgDirSelectExA
TrackPopupMenuEx
CharPrevW
GetProcessWindowStation
CountClipboardFormats
GetClipboardFormatNameA
IsWindowVisible
SetMenuItemInfoW
SendDlgItemMessageW
RegisterClassExA
SetDlgItemTextA
RegisterClassA
EnumChildWindows
ShowWindow
CreateDesktopA
wvsprintfA
EnumDisplaySettingsExW
NotifyWinEvent
DdeCreateDataHandle
CreateWindowExW
CreateIconIndirect
MessageBoxW
DestroyWindow
DefWindowProcW
SendMessageTimeoutW
ChangeDisplaySettingsW
comctl32
ImageList_GetBkColor
CreateToolbar
CreateStatusWindowA
InitMUILanguage
DestroyPropertySheetPage
ImageList_DragLeave
DrawInsert
CreatePropertySheetPageA
ImageList_Add
ImageList_DrawEx
DrawStatusTextA
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_GetImageCount
ImageList_Replace
ImageList_Read
DrawStatusText
ImageList_SetBkColor
_TrackMouseEvent
ImageList_Merge
ImageList_Duplicate
ImageList_SetFilter
CreateStatusWindow
CreateToolbarEx
Sections
.text Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 249KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ