Static task
static1
Behavioral task
behavioral1
Sample
0e9b376f8ada240e3927245426f0da37_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0e9b376f8ada240e3927245426f0da37_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e9b376f8ada240e3927245426f0da37_JaffaCakes118
-
Size
501KB
-
MD5
0e9b376f8ada240e3927245426f0da37
-
SHA1
4f8f8c9d86d6a29c24f091c6248d7c444e3b514b
-
SHA256
c5fedd414a184ea363899760eb1acdc9ed61d684e98a7b29440b27c7d1be8c58
-
SHA512
87c03ab5febf7c3a98e087d4bb2a794724da1945ca6b4bfa54bfd52eac3047d7deeb2a5d65ec3a4a24186c6d3e04aae46c3628991e6814d3f6aafb5228b9c946
-
SSDEEP
12288:sNRXNH7dzry/2xFjLNyLRXXLmooA0+CnCaGCoLBrKmmMuy:gRXNH7dzryagLRLGqGosY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e9b376f8ada240e3927245426f0da37_JaffaCakes118
Files
-
0e9b376f8ada240e3927245426f0da37_JaffaCakes118.exe windows:4 windows x86 arch:x86
3b155beca76340178a6452d92494dcbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetTimeZoneInformation
GetModuleFileNameA
SetFilePointer
GetFileType
UnhandledExceptionFilter
SetHandleCount
ReadFile
GetStdHandle
LCMapStringW
LCMapStringA
HeapSize
MultiByteToWideChar
GetDriveTypeA
WideCharToMultiByte
TerminateProcess
ExitProcess
GetCurrentProcess
VirtualAlloc
VirtualFree
CloseHandle
HeapDestroy
GetProcAddress
HeapCreate
GetCommandLineA
GetStartupInfoA
GetVersion
GetFullPathNameA
GetModuleHandleA
GetCurrentDirectoryA
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCPInfo
GetACP
GetEnvironmentStringsW
RtlUnwind
WriteFile
GetOEMCP
GetStringTypeW
SetStdHandle
GetStringTypeA
CreateFileA
LoadLibraryA
FlushFileBuffers
SetEndOfFile
CompareStringW
SetEnvironmentVariableA
VirtualProtect
FindFirstFileA
FindClose
FileTimeToSystemTime
DeleteFileA
RaiseException
FileTimeToLocalFileTime
user32
SendMessageA
MessageBoxA
SetWindowTextA
ValidateRect
ShowCursor
EnableWindow
CreateDialogParamA
WaitMessage
TranslateMessage
GetDlgItemInt
SetDlgItemInt
DialogBoxParamA
GetFocus
SetTimer
GetDlgItemTextA
KillTimer
CallWindowProcA
SendDlgItemMessageA
SetDlgItemTextA
EndDialog
GetKeyNameTextA
GetWindowTextA
EnableMenuItem
GetDlgItem
GetSubMenu
SetMenuItemInfoA
GetMenuItemCount
CheckMenuItem
GetAsyncKeyState
PostQuitMessage
DefWindowProcA
DrawMenuBar
GetMenu
GetSystemMetrics
GetWindowRect
SetWindowLongA
SetWindowPos
GetWindowLongA
AdjustWindowRect
ReleaseDC
MoveWindow
GetWindowDC
LoadCursorA
ClientToScreen
LoadIconA
ShowWindow
RegisterClassA
CreateWindowExA
LoadAcceleratorsA
UpdateWindow
SetFocus
TranslateAcceleratorA
PeekMessageA
DispatchMessageA
DestroyWindow
gdi32
GetTextMetricsA
GetStockObject
GetSystemPaletteEntries
comctl32
ord2
ord6
ord17
ddraw
DirectDrawCreate
winmm
joyGetPos
timeGetTime
dsound
DirectSoundCreate
wsock32
WSACleanup
getpeername
getsockname
recv
ioctlsocket
WSAStartup
accept
listen
bind
WSAAsyncSelect
closesocket
inet_addr
ntohs
send
connect
setsockopt
socket
htons
Sections
.text Size: 330KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yvs Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE