Static task
static1
Behavioral task
behavioral1
Sample
0f144f5e15f5c9a9050a2224b8ba9fd1_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f144f5e15f5c9a9050a2224b8ba9fd1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f144f5e15f5c9a9050a2224b8ba9fd1_JaffaCakes118
-
Size
82KB
-
MD5
0f144f5e15f5c9a9050a2224b8ba9fd1
-
SHA1
5dcc16e8adcd86e20a2403d82041f2063a1e5b9a
-
SHA256
a04b4e7a26693e6aa556f9c1483dc7da23f3fea9929098c8da9e18f9496e66a8
-
SHA512
7f7a7d945a6214cce5bbcc4801aad6472ed7a3e6730b21307f436400e164b533e4f48085c861d9aeec47e644125954733afd82cf239244b639d9ce7d5d60ec4c
-
SSDEEP
1536:TXZvDZJr3o1Xa0Zn4QEEVvbXe+60eLD8vKNjQ5xRKkOXtrr:TH5oJvb6hNjQ5xRKbXtrr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f144f5e15f5c9a9050a2224b8ba9fd1_JaffaCakes118
Files
-
0f144f5e15f5c9a9050a2224b8ba9fd1_JaffaCakes118.exe windows:4 windows x86 arch:x86
17d904c9082597a12725c116d3123575
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenUrlW
InternetQueryDataAvailable
InternetAttemptConnect
InternetCloseHandle
InternetReadFile
InternetOpenW
InternetClearAllPerSiteCookieDecisions
InternetSetPerSiteCookieDecisionW
InternetSetFilePointer
kernel32
lstrcatW
Sleep
GetFileTime
GetFileSize
FileTimeToSystemTime
GetModuleFileNameW
CloseHandle
CreateFileW
SetFilePointer
CreateProcessW
ResumeThread
lstrcpyW
SystemTimeToFileTime
GetLastError
GetCurrentDirectoryW
GetLocalTime
SetFileTime
WriteFile
WaitForSingleObject
DeleteFileW
GetSystemTime
GetSystemDirectoryW
SetStdHandle
GetTimeZoneInformation
ExitProcess
FindClose
FindFirstFileW
SetCurrentDirectoryW
SetWaitableTimer
CreateWaitableTimerW
GetTickCount
CreateThread
OpenWaitableTimerW
HeapSize
LoadLibraryA
GetConsoleMode
GetConsoleCP
RtlUnwind
InitializeCriticalSection
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CopyFileW
HeapFree
GetStringTypeW
GetStringTypeA
LCMapStringW
WideCharToMultiByte
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
MultiByteToWideChar
HeapAlloc
GetSystemTimeAsFileTime
GetVersionExA
GetProcessHeap
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetStdHandle
GetModuleFileNameA
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
user32
GetMessageW
TranslateMessage
SetWindowLongW
DispatchMessageW
GetWindowLongW
GetForegroundWindow
SetWindowPos
SetForegroundWindow
SetParent
FindWindowW
CharLowerW
advapi32
RegOpenKeyExW
OpenSCManagerW
DeleteService
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
OpenServiceW
ole32
CLSIDFromProgID
CoCreateInstance
OleInitialize
oleaut32
VarBstrCat
SysFreeString
VariantClear
SysAllocString
iphlpapi
GetIfTable
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ