Static task
static1
Behavioral task
behavioral1
Sample
23396cfbbe293fb881c5667a74e77009_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
23396cfbbe293fb881c5667a74e77009_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
23396cfbbe293fb881c5667a74e77009_JaffaCakes118
-
Size
502KB
-
MD5
23396cfbbe293fb881c5667a74e77009
-
SHA1
5048960e0651b3245c0103137bbb8e6da1ca7911
-
SHA256
b3d3636232d51e34bfa1baa5878975f9e5fb87afd3e9c07395278b92ea4f051f
-
SHA512
831fceffbef93726062232b5103f279405b12c4fd81b2ba8660be27cb23ba67a61e843f3a9727f80c76a340fa1e2d2f663a4b3ac125ade16250b2ab8d38798b1
-
SSDEEP
12288:rYO3kdAhRE4H/B4Lz1UJmbuA+wHifRnBsb5S3:sEXH/OPWJmHYRnu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23396cfbbe293fb881c5667a74e77009_JaffaCakes118
Files
-
23396cfbbe293fb881c5667a74e77009_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d08d1249fd8c7b99edbf8de9a312c0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetColorSpace
GetBitmapDimensionEx
ColorMatchToTarget
CancelDC
Pie
DeleteMetaFile
EndDoc
GetCharWidth32W
CreateColorSpaceA
UnrealizeObject
GetArcDirection
GetRgnBox
SetPixel
CreateEllipticRgn
GetColorAdjustment
SetTextAlign
SetFontEnumeration
CreateRoundRectRgn
StartDocW
GetTextColor
GetTextExtentPoint32A
EndPage
GetTextMetricsA
EnumFontsW
advapi32
CryptEncrypt
RegEnumKeyA
CryptEnumProvidersW
CryptContextAddRef
RegCreateKeyA
CryptSetKeyParam
CryptDuplicateHash
LookupSecurityDescriptorPartsW
LookupPrivilegeValueA
CryptGetHashParam
LookupAccountSidA
CryptHashSessionKey
RegQueryMultipleValuesA
RegOpenKeyA
RegDeleteValueW
CryptCreateHash
CryptGetUserKey
CryptEnumProviderTypesA
CryptSetProviderW
RegConnectRegistryA
kernel32
GetCurrentProcessId
SetFilePointer
FreeEnvironmentStringsA
InterlockedDecrement
GetModuleHandleW
GetEnvironmentStringsW
LocalShrink
TlsGetValue
GetCurrentThreadId
GetCommandLineA
GetModuleFileNameA
WriteFile
VirtualFree
OpenMutexA
CompareStringW
HeapCreate
WriteConsoleA
GetOEMCP
IsValidCodePage
GetDateFormatA
GetNumberFormatW
SetConsoleCtrlHandler
GetCompressedFileSizeW
ReadFile
SetStdHandle
GetCurrentProcess
GetTimeFormatA
GetCPInfo
GetEnvironmentStrings
GetConsoleOutputCP
IsValidLocale
CreateFileA
HeapAlloc
LeaveCriticalSection
MultiByteToWideChar
GetLastError
TlsSetValue
TlsFree
GetLocaleInfoA
CompareStringA
GetConsoleCP
TerminateProcess
GetStartupInfoW
DeleteCriticalSection
SleepEx
ExitProcess
HeapDestroy
WriteConsoleW
EnterCriticalSection
LCMapStringW
VirtualProtectEx
FreeLibrary
VirtualQuery
SetUnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
WriteProfileStringW
GetACP
SetLastError
WideCharToMultiByte
GlobalGetAtomNameW
VirtualQueryEx
GetUserDefaultLCID
GetConsoleMode
SetHandleCount
GetLocaleInfoW
GetStartupInfoA
SetEnvironmentVariableA
GetCurrentThread
LoadLibraryA
GetSystemTimeAsFileTime
GetStdHandle
HeapReAlloc
RtlUnwind
GetModuleHandleA
SetConsoleActiveScreenBuffer
FreeEnvironmentStringsW
HeapFree
FlushFileBuffers
IsDebuggerPresent
CloseHandle
InterlockedExchange
WaitCommEvent
OpenFileMappingW
FlushConsoleInputBuffer
VirtualAlloc
GetTickCount
TlsAlloc
lstrcmpA
UnhandledExceptionFilter
Sleep
EnumSystemLocalesA
CreateMutexA
SetVolumeLabelA
HeapSize
LCMapStringA
GetFileType
GetTimeZoneInformation
MoveFileA
GetStringTypeW
GetProcAddress
InterlockedIncrement
InitializeCriticalSectionAndSpinCount
GetStringTypeA
QueryPerformanceCounter
user32
CheckRadioButton
CreateDialogIndirectParamW
GetComboBoxInfo
DdeCreateStringHandleA
BlockInput
SetMenuItemInfoW
GetMenuStringA
RegisterClassExA
RegisterClassA
comctl32
InitCommonControlsEx
Sections
.text Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ