Static task
static1
Behavioral task
behavioral1
Sample
1ba5603c745849465b8efd1bc1a5076c_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1ba5603c745849465b8efd1bc1a5076c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
1ba5603c745849465b8efd1bc1a5076c_JaffaCakes118
-
Size
524KB
-
MD5
1ba5603c745849465b8efd1bc1a5076c
-
SHA1
6dd7daca9f2ea4b7b8ed9ac09eeac143f0f854ef
-
SHA256
84823966169dc6e83ef0ab7d5c2dce17bd57bcaa0753a8d4c0d64bb29fd4a953
-
SHA512
14212c074d7cc7599e5d21627e95497fe42a43475c49646db6d9574ce826df6ff74d93e68652356e6473af322ee6ab6dc6dd89cd51faab028d6d78d3e4b12dc3
-
SSDEEP
12288:t30w5jmz2lpL/db3EhNezKi2W4LxnyRM7LUBL:N/Sz2FJzKDWUQRM+L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ba5603c745849465b8efd1bc1a5076c_JaffaCakes118
Files
-
1ba5603c745849465b8efd1bc1a5076c_JaffaCakes118.exe windows:4 windows x86 arch:x86
0cadeaa6b359094ef95d1a6bbd772611
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CreateCaret
CharNextExA
UnhookWinEvent
RegisterClassExA
MessageBoxW
EnumPropsExW
CreateWindowExA
ShowWindow
DefWindowProcW
MessageBoxExW
EnumChildWindows
SetProcessDefaultLayout
DestroyWindow
EnumDisplaySettingsW
DdeFreeDataHandle
CloseWindow
GetDlgCtrlID
GetWindowDC
WaitMessage
UnregisterClassA
RegisterClassA
comctl32
ImageList_AddMasked
ImageList_GetDragImage
ImageList_SetOverlayImage
MakeDragList
ImageList_LoadImageW
DrawStatusTextW
CreateStatusWindow
InitCommonControlsEx
DrawInsert
kernel32
LeaveCriticalSection
InterlockedExchange
GetNumberFormatW
GetLocaleInfoA
WriteFile
GetModuleFileNameA
FindFirstFileA
GetLastError
GetStartupInfoA
GetLocaleInfoW
IsValidLocale
SetLastError
RtlUnwind
GetStringTypeW
HeapDestroy
GetSystemTimeAsFileTime
GetCPInfo
SetVolumeLabelA
TlsAlloc
GetEnvironmentStringsW
LCMapStringA
HeapReAlloc
ReadFile
DeleteCriticalSection
GetVersionExA
FreeEnvironmentStringsW
GetOEMCP
FlushFileBuffers
CreateMutexA
FlushViewOfFile
CloseHandle
EnterCriticalSection
GetUserDefaultLCID
VirtualProtect
WideCharToMultiByte
WaitForSingleObjectEx
GetCurrentProcess
CreateEventW
CompareStringW
GlobalGetAtomNameW
GetACP
SetFileAttributesA
GetCurrentThreadId
GlobalAddAtomW
HeapSize
QueryPerformanceCounter
lstrcpynA
GetEnvironmentVariableW
SetConsoleWindowInfo
HeapFree
VirtualFree
VirtualQuery
GetConsoleMode
LoadLibraryA
MultiByteToWideChar
LCMapStringW
InterlockedDecrement
TlsFree
GetStdHandle
GetVolumeInformationA
GetTimeFormatA
OpenWaitableTimerW
GetFileType
GetPrivateProfileStructW
ExpandEnvironmentStringsA
InitializeCriticalSection
SetStdHandle
GetDateFormatA
GetCurrencyFormatA
RaiseException
HeapCreate
GetPrivateProfileSectionNamesA
GetTickCount
SetConsoleMode
TlsSetValue
GetEnvironmentStrings
GetPrivateProfileIntW
FreeEnvironmentStringsA
GetProcAddress
SetFileTime
GetStringTypeA
GetCurrentThread
CreateMutexW
GetProfileSectionA
EnumDateFormatsExW
ExitProcess
GetExitCodeProcess
GetCommandLineA
GetProfileIntA
IsValidCodePage
HeapLock
GetSystemInfo
GetDateFormatW
CompareFileTime
GetCurrentProcessId
GetModuleHandleA
EnumSystemLocalesA
IsBadWritePtr
UnhandledExceptionFilter
CompareStringA
GetNamedPipeHandleStateW
SetEnvironmentVariableA
UnmapViewOfFile
TlsGetValue
GetTimeZoneInformation
DuplicateHandle
FreeLibrary
SetHandleCount
TerminateProcess
SetFilePointer
OpenMutexA
ReadFileEx
HeapAlloc
VirtualAlloc
ReadConsoleW
Sections
.text Size: 148KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ