Static task
static1
Behavioral task
behavioral1
Sample
1be93ecec4668d74796c44522baf5be8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1be93ecec4668d74796c44522baf5be8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1be93ecec4668d74796c44522baf5be8_JaffaCakes118
-
Size
276KB
-
MD5
1be93ecec4668d74796c44522baf5be8
-
SHA1
1060d02825af4bf5cb8733abbb08ba94b0288eed
-
SHA256
13aa4b1bbdebf9cad2ed506ff0784c44a56490b515b6c6542a4e225418f52cab
-
SHA512
29bf5511b51c77f5ec746160218c4bd7c52323fe3a9ba658e02e113230cacc41a50c0077f0dead771ded71bff0155ed00b8f0d16379ce8113bce10a092ab6780
-
SSDEEP
6144:+FyPs9F9Ggv5fcsSJRQMGyvIa7bcTBH3w3:uyghf2R7bcTFM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1be93ecec4668d74796c44522baf5be8_JaffaCakes118
Files
-
1be93ecec4668d74796c44522baf5be8_JaffaCakes118.exe windows:4 windows x86 arch:x86
1157664a60936337fe130d8d58d614ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetCookieA
shlwapi
PathFindExtensionA
PathFindFileNameA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
kernel32
GlobalGetAtomNameA
CreateSemaphoreA
ReleaseSemaphore
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringA
GlobalFlags
SetErrorMode
GetCPInfo
GetOEMCP
ExitProcess
VirtualAlloc
HeapAlloc
HeapFree
HeapReAlloc
GetFileType
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapSize
GetConsoleCP
GetConsoleMode
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
GetACP
SetStdHandle
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetThreadLocale
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
RaiseException
LocalAlloc
LocalFree
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeResource
Sleep
SetLastError
GetVersionExA
GetCurrentProcess
GetModuleFileNameA
CreateFileA
WaitForSingleObject
TerminateProcess
CloseHandle
lstrlenA
CompareStringA
MultiByteToWideChar
InterlockedExchange
GetVersion
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
LoadLibraryA
GetProcAddress
GetLastError
OpenMutexA
FreeLibrary
RtlUnwind
user32
LoadCursorA
ClientToScreen
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
BeginPaint
EndPaint
UnregisterClassA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
GetDC
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetDesktopWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
SendMessageA
ModifyMenuA
EnableMenuItem
CheckMenuItem
ReleaseDC
GetSysColorBrush
DestroyMenu
PostQuitMessage
ShowWindow
SetWindowTextA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetForegroundWindow
GetMenu
GetForegroundWindow
GetWindow
IsWindowVisible
GetParent
GetClassNameA
GetWindowThreadProcessId
PostMessageA
RegisterWindowMessageA
EnableWindow
IsDialogMessageA
PtInRect
DestroyWindow
gdi32
SetTextColor
SetBkColor
GetObjectA
GetClipBox
CreateBitmap
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
DeleteObject
ExtTextOutA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantInit
VariantClear
VariantChangeType
ws2_32
WSAStartup
WSACleanup
Sections
.text Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ