Static task
static1
Behavioral task
behavioral1
Sample
1acf830d1e3e7dfc2fa4cadcb44d3a69_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1acf830d1e3e7dfc2fa4cadcb44d3a69_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
1acf830d1e3e7dfc2fa4cadcb44d3a69_JaffaCakes118
-
Size
124KB
-
MD5
1acf830d1e3e7dfc2fa4cadcb44d3a69
-
SHA1
6214ce778385e8a400fbb1f29f23208990a7b308
-
SHA256
57bc0297e26e4d38fd3235aedd1f2dec8a54111893d76d1ee3707a719f96b939
-
SHA512
8f3d0a3d6f8c12b7d754adb8c8dfdbe7e7f8a7b3ec90e882ffb5b9782ba1c52232a5f397d802f08629236048f0b7be88aee57c16ec0b246e471fb119099d005e
-
SSDEEP
3072:5ZcZpXvDNCa/Ba9UpP2NFRZmtPH3pEhKy2bYcqesYzoHI:MPH5HoFI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1acf830d1e3e7dfc2fa4cadcb44d3a69_JaffaCakes118
Files
-
1acf830d1e3e7dfc2fa4cadcb44d3a69_JaffaCakes118.exe windows:4 windows x86 arch:x86
e6c4f6edd8745f5cc2ce37ffbed151d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetModuleFileNameA
FreeLibrary
LoadLibraryA
GetProcAddress
WinExec
GetTickCount
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetLocalTime
GlobalFree
GetStringTypeW
GetStringTypeA
RtlUnwind
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
ReadFile
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
SetFilePointer
GetCurrentProcess
TerminateProcess
WriteFile
CloseHandle
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
CreateDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GlobalAlloc
GetWindowsDirectoryA
GetLastError
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
HeapAlloc
HeapFree
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
user32
GetSystemMetrics
MoveWindow
GetMenu
PostMessageA
ReleaseDC
GetDC
GetWindowRect
ChangeDisplaySettingsA
SendMessageA
CreateWindowExA
EndPaint
BeginPaint
SetCursor
LoadCursorA
FillRect
wsprintfA
MessageBoxA
GetCursorPos
EnumDisplaySettingsA
DestroyWindow
IsDlgButtonChecked
GetWindowTextA
GetDlgItemTextA
GetDlgCtrlID
GetClientRect
GetFocus
SetScrollRange
ScrollWindow
SetScrollPos
PostQuitMessage
DefWindowProcA
InvalidateRect
FindWindowA
GetSystemMenu
AppendMenuA
PeekMessageA
TranslateMessage
DispatchMessageA
KillTimer
GetMessageA
SetTimer
SetWindowLongA
ShowScrollBar
UpdateWindow
GetActiveWindow
LoadIconA
RegisterClassA
ShowWindow
SetActiveWindow
SetWindowPos
GetAsyncKeyState
ShowCursor
SetFocus
SetWindowTextA
SetCursorPos
gdi32
SetBkMode
TextOutA
SetStretchBltMode
StretchBlt
DeleteObject
CreateFontIndirectA
GetStockObject
SelectObject
GetTextMetricsA
CreatePen
CreateSolidBrush
SetTextColor
GetTextExtentPoint32A
GetTextExtentPointA
CreatePalette
SetDIBColorTable
GetDeviceCaps
MoveToEx
LineTo
SetPixel
GetPixel
SelectPalette
StretchDIBits
Rectangle
RealizePalette
BitBlt
DeleteDC
CreateDIBSection
CreateCompatibleDC
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteExA
ShellExecuteA
winmm
sndPlaySoundA
mciSendStringA
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ