Static task
static1
Behavioral task
behavioral1
Sample
2312d719106d5beb20c126cccbd382c3_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2312d719106d5beb20c126cccbd382c3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2312d719106d5beb20c126cccbd382c3_JaffaCakes118
-
Size
445KB
-
MD5
2312d719106d5beb20c126cccbd382c3
-
SHA1
a056383c63e68cfe129960a942a62d085cb94f4d
-
SHA256
5bf3a3499e4765bdfa87a0795d063aa29c8cb82ac7710ace6efb2149eafd6e06
-
SHA512
918ad2928b00d6464a99a1f68400de99abcf25cd65afd77d7e057e9601de7dec8eb7c10b21afc65c22716e4618c64eec9c02162e3551401b76e3f21eca7b8877
-
SSDEEP
12288:hhFyVwp4u0tV9FX8dN6ltJZbEqGyrbSYToB:hhF+w30tVAelNEqJSYT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2312d719106d5beb20c126cccbd382c3_JaffaCakes118
Files
-
2312d719106d5beb20c126cccbd382c3_JaffaCakes118.exe windows:4 windows x86 arch:x86
ae9af3bd704d87fd92d1d4ed0dde1a90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibraryAndExitThread
GetFileType
GetSystemDefaultLCID
ReadConsoleOutputCharacterA
GetCPInfo
IsBadWritePtr
HeapAlloc
SetUnhandledExceptionFilter
LCMapStringA
HeapDestroy
MultiByteToWideChar
VirtualFree
SystemTimeToTzSpecificLocalTime
CreateFileW
UnhandledExceptionFilter
IsValidLocale
TlsGetValue
GetDateFormatA
GetEnvironmentStrings
SetFileAttributesA
InterlockedIncrement
CompareStringA
GetEnvironmentStringsW
DeleteCriticalSection
GetCompressedFileSizeA
GetLocaleInfoW
LeaveCriticalSection
GetCurrentThread
GetProcAddress
GetFileAttributesW
GetCommandLineA
SetHandleCount
GetProfileIntW
GetFileAttributesExW
CreatePipe
GetModuleHandleW
VirtualQuery
HeapCreate
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
FlushInstructionCache
GetStartupInfoA
LCMapStringW
GetACP
HeapReAlloc
GetUserDefaultLCID
ExitProcess
SetEnvironmentVariableW
WriteFile
VirtualAlloc
SetLastError
QueryPerformanceCounter
GetCurrentProcess
GetStringTypeW
GetModuleHandleA
FreeEnvironmentStringsA
GetStdHandle
GetStringTypeA
GetCurrentThreadId
InterlockedDecrement
TlsAlloc
GlobalAddAtomW
FreeEnvironmentStringsW
GetCurrentProcessId
TlsSetValue
GetTimeFormatA
EnumDateFormatsExW
GetCurrencyFormatW
GetTickCount
GetLocaleInfoA
ReleaseMutex
EnumSystemLocalesA
IsDebuggerPresent
HeapSize
RtlUnwind
EnterCriticalSection
GetSystemTimeAsFileTime
InterlockedExchange
GetTimeZoneInformation
SetConsoleWindowInfo
CompareStringW
FreeLibrary
TlsFree
GetLastError
GetOEMCP
HeapFree
TerminateProcess
LoadLibraryA
TransmitCommChar
SetConsoleCtrlHandler
WideCharToMultiByte
GetPrivateProfileSectionW
GetModuleFileNameA
IsValidCodePage
CommConfigDialogA
Sleep
ReadConsoleInputA
user32
GetCursorPos
MessageBoxExW
GetSubMenu
DdeUninitialize
GetMenuItemID
TabbedTextOutA
SwitchToThisWindow
GetSysColor
EndDialog
GetClientRect
GetScrollInfo
DdeAbandonTransaction
DdeCmpStringHandles
DialogBoxParamA
MonitorFromWindow
AdjustWindowRect
CharNextExA
TrackPopupMenuEx
DdeDisconnectList
GetKeyboardLayoutNameA
GetWindowLongW
AttachThreadInput
gdi32
GetPaletteEntries
GetBitmapBits
GetRandomRgn
SetBoundsRect
GetICMProfileA
GdiPlayJournal
ResizePalette
GetTextExtentPointA
GetBoundsRect
GetOutlineTextMetricsA
PatBlt
CreateDIBitmap
CreateRectRgnIndirect
SetDIBColorTable
CreateFontW
wininet
ShowCertificate
InternetGoOnline
ShowClientAuthCerts
FtpCreateDirectoryA
InternetGetConnectedStateExW
InternetQueryOptionW
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ