Static task
static1
Behavioral task
behavioral1
Sample
192d1d6b855975fc1a61d93e13709d54_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
192d1d6b855975fc1a61d93e13709d54_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
192d1d6b855975fc1a61d93e13709d54_JaffaCakes118
-
Size
156KB
-
MD5
192d1d6b855975fc1a61d93e13709d54
-
SHA1
f0dc541676ea10b4f2e311c01f8f4ad682617d4b
-
SHA256
5877dca79fa91d5a1f074fb67865885aaa4e8c692022a7563584ede35f78769d
-
SHA512
26c9d2f978876c90c26a76fb7fbb8c8f8f34f9a65b2185e515babd3c91bbfdbfd29806ec24fa3f6ebe92b4113c48bbdf6ad8886723346a96255c091585041041
-
SSDEEP
3072:W3HAuXNWNMblmcthdjFpp3j+ocAEVmyBeR3:QHAuk2blbFjFppzrEVdeR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 192d1d6b855975fc1a61d93e13709d54_JaffaCakes118
Files
-
192d1d6b855975fc1a61d93e13709d54_JaffaCakes118.exe windows:4 windows x86 arch:x86
79870fc1e64405e8adc3112bba569b2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lwrite
_lread
CreateFileA
_lclose
IsDBCSLeadByte
CloseHandle
GetVersionExA
GetModuleHandleA
lstrcmpA
GetFileSize
GetTempPathA
MulDiv
_llseek
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
SetErrorMode
lstrcpynA
OpenFile
GetDriveTypeA
FindResourceA
GetLastError
CreateProcessA
WritePrivateProfileStringA
FreeLibrary
lstrcatA
lstrcpyA
lstrlenA
CopyFileA
CreateDirectoryA
GetShortPathNameA
MoveFileExA
GetWindowsDirectoryA
DeleteFileA
GetProcAddress
FindFirstFileA
FindNextFileA
FindClose
lstrcmpiA
LocalFree
FormatMessageA
RaiseException
GetSystemTime
GetLocalTime
SetEnvironmentVariableA
CompareStringW
GetCurrentProcessId
SetEndOfFile
CompareStringA
GetACP
GetCPInfo
GetFileAttributesA
RemoveDirectoryA
FileTimeToSystemTime
GetOEMCP
FlushFileBuffers
SetStdHandle
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentDirectoryA
GetFullPathNameA
WriteFile
ReadFile
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetVersion
RtlUnwind
HeapFree
HeapAlloc
GetTimeZoneInformation
HeapReAlloc
GetCommandLineA
FileTimeToLocalFileTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
user32
GetSysColor
wsprintfA
LoadCursorA
DialogBoxParamA
SetCursor
MsgWaitForMultipleObjects
GetDesktopWindow
RegisterWindowMessageA
LoadStringA
SetForegroundWindow
SetWindowPos
GetSystemMetrics
GetWindowRect
MessageBoxA
TranslateMessage
DispatchMessageA
PeekMessageA
IsCharAlphaNumericA
IsCharAlphaA
wvsprintfA
SetWindowTextA
SendMessageA
LoadIconA
EndDialog
SetFocus
GetDlgItem
LoadImageA
EnableWindow
WinHelpA
SetDlgItemTextA
CharLowerA
GetKeyboardLayoutNameA
GetDC
GetDlgItemTextA
SendDlgItemMessageA
SetWindowLongA
ReleaseDC
GetWindowLongA
ShowWindow
CharUpperA
gdi32
GetDeviceCaps
SetTextColor
SetBkMode
SelectObject
CreateFontIndirectA
EnumFontFamiliesExA
CreateBrushIndirect
GetStockObject
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
mpr
WNetAddConnection2A
WNetCancelConnection2A
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE