Static task
static1
Behavioral task
behavioral1
Sample
2242324b4d9d82972d09f9e32c672f3f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2242324b4d9d82972d09f9e32c672f3f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2242324b4d9d82972d09f9e32c672f3f_JaffaCakes118
-
Size
406KB
-
MD5
2242324b4d9d82972d09f9e32c672f3f
-
SHA1
2c4cd69718e1139cfe50f10fc5093366d1583d8a
-
SHA256
c66567a3f429e17d3d8a7b21369bd2dcfa2db926460b528a6f0c230e653d18b0
-
SHA512
79e26bb426afc21f6f075a97b2b6adc6243ba816ebb40da3804a22506776ad5e84bc89b212146b301e3667b0fd4e6904a5765535210796f09c3fa051271bbb48
-
SSDEEP
12288:seB/jbWDdgbHCd2ft3YKqegNK57ZEJ7o:5B/jbodQJqegN97
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2242324b4d9d82972d09f9e32c672f3f_JaffaCakes118
Files
-
2242324b4d9d82972d09f9e32c672f3f_JaffaCakes118.exe windows:4 windows x86 arch:x86
c791253b0a12bd424a527b3b1babdf3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
InterlockedExchange
HeapDestroy
GetVersionExA
WriteFile
VirtualFree
LeaveCriticalSection
GetCommandLineA
FreeEnvironmentStringsW
ExitProcess
LoadLibraryA
VirtualAlloc
SetUnhandledExceptionFilter
CompareStringW
GetCPInfo
GetTimeZoneInformation
HeapCreate
EnterCriticalSection
EnumSystemLocalesA
GlobalCompact
GetSystemTimeAsFileTime
TerminateProcess
HeapSize
ReadFileEx
GetModuleHandleA
GetLocaleInfoW
GetCurrentThreadId
lstrlenW
GetLocaleInfoA
GetStdHandle
FillConsoleOutputAttribute
HeapFree
GetCurrentThread
GetCurrentProcessId
IsBadWritePtr
FreeEnvironmentStringsA
GetDateFormatA
GetStringTypeA
ReadFile
VirtualAllocEx
GetSystemInfo
SetLastError
SetHandleCount
SetFilePointer
CompareStringA
VirtualQuery
GetCurrentProcess
GetStringTypeW
GetStartupInfoW
TlsFree
GetTimeFormatA
GetModuleFileNameW
ResetEvent
InitializeCriticalSection
GetEnvironmentStringsW
IsValidLocale
GetLastError
MultiByteToWideChar
GlobalGetAtomNameW
GetNamedPipeInfo
WriteConsoleOutputAttribute
GetTickCount
CreateMutexA
FlushFileBuffers
LCMapStringA
GetProcAddress
IsValidCodePage
GetCommandLineW
WriteConsoleOutputCharacterA
UnhandledExceptionFilter
GetStartupInfoA
OpenSemaphoreW
DosDateTimeToFileTime
TryEnterCriticalSection
TlsSetValue
OpenMutexA
GetFileType
GetEnvironmentStrings
QueryPerformanceCounter
GetACP
LCMapStringW
RtlUnwind
CloseHandle
ReadConsoleInputW
TlsAlloc
HeapReAlloc
GetUserDefaultLCID
VirtualProtect
SetStdHandle
GetDriveTypeW
HeapAlloc
WideCharToMultiByte
TlsGetValue
SetEnvironmentVariableA
GetOEMCP
GetModuleFileNameA
user32
DefWindowProcA
DestroyWindow
PaintDesktop
MsgWaitForMultipleObjects
PostThreadMessageA
SwitchDesktop
SendMessageA
GetKeyNameTextA
MessageBoxW
DlgDirListW
GetWindowInfo
RegisterClassExA
EqualRect
GetOpenClipboardWindow
InvertRect
RegisterClassA
FindWindowExW
EnumDisplayMonitors
ShowWindow
CreateWindowExA
SetWindowLongA
GetKeyboardLayoutNameW
TabbedTextOutA
advapi32
RegDeleteValueA
AbortSystemShutdownW
RegEnumKeyExA
GetUserNameW
GetUserNameA
LookupPrivilegeDisplayNameW
CryptReleaseContext
CryptEnumProviderTypesW
RegCreateKeyExW
RegEnumValueW
LogonUserW
CryptExportKey
RegSaveKeyW
LookupPrivilegeValueW
InitiateSystemShutdownW
CryptGenKey
RegReplaceKeyA
CryptSetHashParam
RegSetValueW
LookupAccountNameA
AbortSystemShutdownA
RegCreateKeyA
RegReplaceKeyW
comctl32
ImageList_Write
CreatePropertySheetPage
ImageList_SetDragCursorImage
ImageList_AddIcon
CreateToolbar
ImageList_SetOverlayImage
_TrackMouseEvent
CreateToolbarEx
ImageList_GetBkColor
ImageList_DragEnter
ImageList_Add
CreateMappedBitmap
CreateStatusWindowA
ImageList_ReplaceIcon
ImageList_DrawIndirect
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_Read
ImageList_GetDragImage
InitCommonControlsEx
CreateUpDownControl
ImageList_Copy
ImageList_GetIcon
comdlg32
FindTextA
PageSetupDlgA
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ