Static task
static1
Behavioral task
behavioral1
Sample
0d6f3b9c3c59bf19ec0bbcd6c2ef8cad_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0d6f3b9c3c59bf19ec0bbcd6c2ef8cad_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0d6f3b9c3c59bf19ec0bbcd6c2ef8cad_JaffaCakes118
-
Size
351KB
-
MD5
0d6f3b9c3c59bf19ec0bbcd6c2ef8cad
-
SHA1
8654168964adfc77a80a0b0c7b633111254fb4b5
-
SHA256
c40232d8a540ccf865b875ab6be2f7f1b35396fb88c7670dfb336ff8b8d45971
-
SHA512
f5fc47c7f0a7a2f8aaa26eef1b88d11baea6b6452c08aa6b893d3a1cee9b84dc22ecfbcff601c48fcc34c8ed7b51c1d34921a50cd6616ffb17bc28b0dd6aabd9
-
SSDEEP
6144:v4CIW8tYc67495F/EJMnbjEAfTI3xxe8nVvJIrQ58Y9eK53zCb:AG8tYs959dTIBlnlJIrQzh53z2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d6f3b9c3c59bf19ec0bbcd6c2ef8cad_JaffaCakes118
Files
-
0d6f3b9c3c59bf19ec0bbcd6c2ef8cad_JaffaCakes118.exe windows:0 windows x86 arch:x86
a408d3335b1b6a4bfea5cb2b78f98935
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
__wgetmainargs
_initterm
rand
_itow
_adjust_fdiv
_c_exit
__argc
_beginthreadex
wcscmp
_controlfp
_onexit
_CxxThrowException
_cexit
__setusermatherr
_wtol
__p__commode
_wtoi
_getdcwd
__CxxFrameHandler
_ltow
_wcsicmp
_purecall
_except_handler3
wcscat
__dllonexit
_wsplitpath
__set_app_type
_wcmdln
exit
wcschr
__p__fmode
free
_exit
_wcsdup
_XcptFilter
__wargv
wcstok
kernel32
GetTempPathW
RaiseException
GetACP
GetModuleHandleA
FileTimeToSystemTime
lstrcpynW
GetDateFormatW
lstrcmpW
GlobalAlloc
GetCurrentThreadId
InterlockedIncrement
GetStartupInfoW
CreateDirectoryW
GetModuleHandleW
GlobalLock
GetTimeFormatW
GlobalReAlloc
FindFirstFileW
GetLocaleInfoW
CreateFileW
QueryPerformanceCounter
FileTimeToLocalFileTime
GetFileAttributesW
InterlockedDecrement
GetCurrentProcessId
LoadLibraryA
InterlockedExchange
GetFileTime
GetNumberFormatW
HeapAlloc
GetCurrentProcess
IsDBCSLeadByte
SetUnhandledExceptionFilter
GlobalUnlock
GetSystemTimeAsFileTime
GetProcessHeaps
GetFileSize
lstrcatW
LoadLibraryW
lstrlenW
GetTickCount
lstrlenA
lstrcpyW
UnhandledExceptionFilter
GetProcessHeap
GetTempFileNameW
GetProcAddress
MultiByteToWideChar
SetEndOfFile
TerminateProcess
GlobalFree
GetThreadLocale
VirtualFree
GetLastError
VirtualAlloc
LocalAlloc
lstrcmpiW
HeapSize
FreeLibrary
GetExitCodeThread
CloseHandle
LocalFree
MulDiv
SetErrorMode
FindClose
user32
TranslateMessage
CreateWindowExA
SendMessageA
ShowWindow
DispatchMessageA
DefWindowProcA
RegisterClassExA
UpdateWindow
DestroyWindow
GetMessageA
gdi32
LPtoDP
EnumFontFamiliesExW
GetDeviceCaps
RestoreDC
CreateDCW
Polyline
SetDIBitsToDevice
Escape
SetStretchBltMode
CreateCompatibleBitmap
GetNearestPaletteIndex
RealizePalette
UnrealizeObject
CreateDIBitmap
DeleteDC
GetPixel
GetDIBits
SetROP2
FillRgn
SaveDC
Ellipse
SetBkMode
CreateDIBSection
StretchDIBits
PolyBezier
SelectObject
SetMapMode
PlayMetaFile
GetNearestColor
TextOutW
GetObjectW
GetTextExtentPoint32W
CreateICW
GetTextColor
GetDIBColorTable
BitBlt
CreatePen
CreateBitmap
PatBlt
RoundRect
PtVisible
SelectPalette
CreateHalftonePalette
GetTextMetricsW
StretchBlt
DeleteObject
GetCurrentObject
CreateFontIndirectW
CreateSolidBrush
OffsetRgn
RectVisible
SetPaletteEntries
GetPaletteEntries
CreatePalette
SetTextAlign
SetBrushOrgEx
CreateRectRgnIndirect
SetPixel
GetStockObject
Polygon
CreatePolygonRgn
ExtFloodFill
CreatePatternBrush
SetDIBColorTable
MoveToEx
SetBkColor
ExtTextOutW
SetViewportExtEx
CreateCompatibleDC
SetDIBits
ResizePalette
EnumFontFamiliesW
Rectangle
SetTextColor
GetBkMode
LineTo
TranslateCharsetInfo
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 161KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ