Static task
static1
Behavioral task
behavioral1
Sample
1738aac328ed84aa28c17be02682df31_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1738aac328ed84aa28c17be02682df31_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1738aac328ed84aa28c17be02682df31_JaffaCakes118
-
Size
597KB
-
MD5
1738aac328ed84aa28c17be02682df31
-
SHA1
f30fe4d95f8095ccb7bd012dcf5e15600f263124
-
SHA256
0eaf43d7d9ba6476417564f9a5f5b1352e83d47af1ed5b5f0981b4e0f73fe00d
-
SHA512
5120bec1d17a9567999c25eb6d03abf8a82ebd3eab46eb4937a09bc9be056a912ff47538e12ff5b3fb4199a4a9e930363226086da6b5732e33155c88b46722a6
-
SSDEEP
12288:3dPmtT/AsnDooFetTdlw5ES2UZ6CvEg8/3KFDxB2+hPjN/v2Tmm:8tnEkMp6WS2U7E6xBxbm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1738aac328ed84aa28c17be02682df31_JaffaCakes118
Files
-
1738aac328ed84aa28c17be02682df31_JaffaCakes118.exe windows:4 windows x86 arch:x86
904cb2eba08d6bf1f2cc9f03bc5f17a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetSystemMetrics
LoadStringW
CharNextW
SetWindowLongA
SystemParametersInfoA
ReleaseDC
DefWindowProcA
MessageBoxA
LoadImageA
RegisterClassA
EnumDisplayMonitors
GetDesktopWindow
CharNextA
MessageBoxW
GetDC
LoadBitmapA
GetWindowLongA
DrawTextW
UnregisterClassA
BeginPaint
UpdateWindow
DestroyWindow
LoadIconA
SetForegroundWindow
advapi32
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyW
RegDeleteKeyA
RegQueryInfoKeyA
RegQueryValueExA
CryptDestroyHash
RegSetValueExW
gdi32
BitBlt
SetStretchBltMode
DeleteObject
GetObjectA
RealizePalette
CreateCompatibleDC
kernel32
IsDBCSLeadByte
LCMapStringW
LoadLibraryExW
CreateThread
TlsFree
WideCharToMultiByte
FreeLibrary
CreateDirectoryW
CreateFileW
CreateFileMappingA
FindResourceExA
GetModuleFileNameA
SetUnhandledExceptionFilter
ExitProcess
HeapSize
lstrlenW
InterlockedCompareExchange
GetEnvironmentVariableA
FindResourceA
GetFileSize
CopyFileW
GetFileAttributesA
QueryPerformanceCounter
FlushFileBuffers
CreateMutexA
lstrlenA
FreeResource
LoadResource
LockResource
RaiseException
SizeofResource
GetSystemTimeAsFileTime
GetProcessHeap
CreateProcessW
InterlockedExchange
GetModuleFileNameW
ReadFile
DeleteAtom
LocalFree
InterlockedDecrement
CloseHandle
LoadLibraryExA
GetThreadLocale
Sleep
VirtualFree
EnumSystemCodePagesA
GetLocaleInfoA
CreateProcessA
AddAtomW
GetStdHandle
HeapDestroy
lstrcpyA
GetModuleHandleA
lstrcpynW
GetVersionExA
GetLastError
FindFirstFileW
GlobalAlloc
ReleaseMutex
LoadLibraryA
GetFileAttributesW
MultiByteToWideChar
GetACP
TlsGetValue
OutputDebugStringW
SetEvent
IsDebuggerPresent
UnhandledExceptionFilter
HeapFree
GetCurrentProcess
LeaveCriticalSection
lstrcmpiA
GlobalFree
WaitForSingleObject
UnmapViewOfFile
CompareFileTime
LCMapStringA
GetSystemTime
CreateFileMappingW
GetUserDefaultUILanguage
GetProcAddress
EnumTimeFormatsW
HeapAlloc
GetCurrentThreadId
MulDiv
GetVersion
FindAtomW
GetFileAttributesExW
GetTickCount
TerminateProcess
HeapReAlloc
DeleteCriticalSection
MapViewOfFile
OpenProcess
TlsAlloc
EnterCriticalSection
GetCurrentProcessId
MoveFileW
FormatMessageW
TlsSetValue
WriteFile
LoadLibraryW
SystemTimeToFileTime
FindNextFileW
GetStartupInfoA
VirtualAlloc
FindClose
InterlockedIncrement
GlobalLock
GlobalUnlock
InitializeCriticalSection
Sections
.text Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ