Static task
static1
Behavioral task
behavioral1
Sample
18badd8a18cd969bfbf5a9f6813ac8d1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
18badd8a18cd969bfbf5a9f6813ac8d1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
18badd8a18cd969bfbf5a9f6813ac8d1_JaffaCakes118
-
Size
101KB
-
MD5
18badd8a18cd969bfbf5a9f6813ac8d1
-
SHA1
a5831e8d01302e1ade01324c5611cba04ba8b456
-
SHA256
adaca65dc0d20e9b639fdecbe66c3b4e1c61d61b26e8de3dac17b9cbed68b2b0
-
SHA512
d8275af40167e6c6cb3fb9d30f72bb8f0928e77d39f7116786f94f27452ee2fb9b57dd2d425d9e959a2d9eb153d7eb9d3496aaf65253225ca7010d66f589815a
-
SSDEEP
3072:+jB6rCbRJ4HkA3KrGibF7mvFDlnmjvWyIdWZV:Y40WzarGibdCD2vWyH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18badd8a18cd969bfbf5a9f6813ac8d1_JaffaCakes118
Files
-
18badd8a18cd969bfbf5a9f6813ac8d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
40ce08dd0c59810dc975cab07d4d5a4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyA
IsValidSecurityDescriptor
AdjustTokenPrivileges
RegDeleteValueA
kernel32
CompareStringA
CloseHandle
AddAtomA
CreateFileMappingW
CreateDirectoryW
CompareFileTime
CreateMutexW
EnterCriticalSection
CreateFileW
ExpandEnvironmentStringsA
FindFirstFileW
FindNextFileA
CopyFileW
FindCloseChangeNotification
FindClose
FreeResource
FindNextFileW
FindFirstChangeNotificationA
ExitProcess
FindResourceW
FlushFileBuffers
FreeEnvironmentStringsW
GetConsoleCP
GetCurrentProcessId
GetEnvironmentStringsW
GetCPInfo
GetAtomNameA
FreeEnvironmentStringsA
GetConsoleOutputCP
FindResourceExA
GetDriveTypeA
FindResourceA
FreeLibrary
GetFileAttributesW
GetCurrentDirectoryA
GetFullPathNameA
GetFileTime
GetProcessHeap
GetStdHandle
GetCurrentDirectoryW
GetLastError
GetTickCount
GetModuleFileNameW
GetFileType
GetStartupInfoA
GetModuleHandleW
GetStartupInfoW
GetProcessTimes
GetSystemInfo
GetProcessAffinityMask
GlobalReAlloc
GetLogicalDriveStringsW
GetWindowsDirectoryA
GetStringTypeA
GetLocaleInfoW
GetProcessWorkingSetSize
GetThreadLocale
GetPrivateProfileStringW
GetStringTypeW
GetUserDefaultLangID
GetUserDefaultLCID
GetLogicalDrives
IsBadReadPtr
GetSystemTime
GetVersion
GetThreadPriority
HeapCreate
lstrcatA
QueryDosDeviceW
MoveFileExW
GetTempFileNameA
GetSystemDirectoryA
GetTempPathW
GetVersionExA
LCMapStringW
HeapReAlloc
GetThreadContext
GlobalSize
IsDBCSLeadByte
GlobalFindAtomA
SetFileAttributesW
SetCurrentDirectoryW
QueryPerformanceCounter
LocalFree
lstrcmpA
MapViewOfFile
HeapFree
GetTempFileNameW
MultiByteToWideChar
HeapDestroy
WritePrivateProfileStringA
ReleaseMutex
IsBadStringPtrA
lstrcmpiA
IsValidCodePage
ReadFile
OpenEventA
MoveFileA
WriteConsoleA
SystemTimeToFileTime
HeapAlloc
SetProcessWorkingSetSize
OpenMutexW
WritePrivateProfileStringW
TlsAlloc
RtlUnwind
SetEvent
SizeofResource
TlsFree
VirtualQueryEx
SetLastError
OpenFileMappingW
lstrcpynA
Sleep
SetEndOfFile
OutputDebugStringA
SetStdHandle
VirtualQuery
SetFileTime
SetFileAttributesA
WriteConsoleW
RemoveDirectoryA
WideCharToMultiByte
WaitForSingleObject
WinExec
SetConsoleCtrlHandler
TerminateProcess
SuspendThread
UnhandledExceptionFilter
avifil32
AVIFileInfoA
user32
ActivateKeyboardLayout
BeginDeferWindowPos
CharLowerA
CharLowerBuffA
CharNextA
AdjustWindowRectEx
CharNextW
CharToOemA
DdeDisconnect
CharUpperBuffA
DefFrameProcA
CheckDlgButton
CreateDialogIndirectParamA
CheckRadioButton
DdeCreateStringHandleA
CreateWindowExA
CheckMenuRadioItem
CloseClipboard
DestroyCaret
CreateDialogParamA
DdeConnect
CreateIcon
DdeClientTransaction
DestroyIcon
DispatchMessageW
DdeInitializeA
ChildWindowFromPoint
DrawFrameControl
DefWindowProcA
DialogBoxIndirectParamA
DrawMenuBar
GetAsyncKeyState
EndDeferWindowPos
GetClipboardData
EnumClipboardFormats
DrawIconEx
EndDialog
DestroyMenu
DialogBoxParamA
DispatchMessageA
DefDlgProcA
GetDlgItemTextW
EndPaint
FlashWindowEx
DialogBoxIndirectParamW
EmptyClipboard
GetClassNameA
GetCursor
GetKeyboardType
DrawTextW
GetKeyNameTextA
GetFocus
FrameRect
GetClassLongA
GetSystemMetrics
GetDlgItemTextA
GetDlgItemInt
GetDCEx
GetKeyState
GetClassNameW
GetKeyboardLayoutList
GetClientRect
GetTopWindow
GetScrollPos
GetMenuState
GetMenuItemCount
GetQueueStatus
GetParent
GetUserObjectSecurity
GetKeyboardState
GetMenu
GetMessageTime
GetDlgCtrlID
GetSubMenu
GetMenuStringA
InsertMenuA
InsertMenuItemW
GetSysColorBrush
GetWindowRect
LoadImageA
GetMessagePos
GetSysColor
GetWindowDC
GetUpdateRect
GetMenuItemInfoA
GetWindowPlacement
GetWindowTextLengthW
IsDialogMessageA
MessageBoxA
HideCaret
GetWindowLongA
IsCharAlphaNumericA
RedrawWindow
LoadMenuA
IsWindowEnabled
GetWindow
IsDlgButtonChecked
IsClipboardFormatAvailable
LoadAcceleratorsA
SendMessageW
mouse_event
IsZoomed
IsCharAlphaA
GetWindowTextLengthA
GetUpdateRgn
PostMessageW
OemToCharA
OpenClipboard
LoadIconW
PeekMessageW
LoadCursorA
InsertMenuItemA
RegisterWindowMessageA
RegisterClassA
RegisterClipboardFormatA
LockWindowUpdate
UnregisterClassA
SetClipboardData
RemoveMenu
LoadKeyboardLayoutA
IsIconic
SetForegroundWindow
MessageBoxW
RegisterClassExA
SetMenu
ShowCursor
SetActiveWindow
SetCaretPos
SendMessageTimeoutA
SendDlgItemMessageA
ShowCaret
PtInRect
ReleaseDC
RemovePropA
WaitMessage
SetFocus
SetCursor
SystemParametersInfoA
SetWindowsHookExA
SetWindowRgn
TranslateMessage
WaitForInputIdle
SetDlgItemTextA
SetRect
SetMenuItemBitmaps
ShowScrollBar
SetKeyboardState
ShowOwnedPopups
ShowWindowAsync
SetTimer
TrackPopupMenuEx
SetWindowPlacement
SetMenuItemInfoA
ValidateRect
SystemParametersInfoW
OffsetRect
SetWindowLongA
ToAscii
UnionRect
TrackPopupMenu
comdlg32
PrintDlgA
GetOpenFileNameA
ChooseColorA
FindTextA
Sections
CODE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE