Static task
static1
Behavioral task
behavioral1
Sample
23998c94ad03868f808be942255989e1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23998c94ad03868f808be942255989e1_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
23998c94ad03868f808be942255989e1_JaffaCakes118
-
Size
684KB
-
MD5
23998c94ad03868f808be942255989e1
-
SHA1
1400e5091584308c6da2c4e633b1a45f63554ab8
-
SHA256
3d976dac7b621edcec3bd5a1b6e58a9dacccf5fdf724adb1c1e8f0595152f64d
-
SHA512
508944adb988576a619ab125b11d41ff38fa1acc22c816c078a4dfe69cfe55deb5f185634586499746e05f7572a03cc7f69c4bf5d7d40ad0a960300dc0900e5c
-
SSDEEP
12288:WHh6fDVd7vM4/f/AW5BZxSsPahTSsPaONSsPamC3SsPaJvtSsPaAXSsPaonSsPab:nDVd7v3/pDxSogTSorNSoL2SoclSorXA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23998c94ad03868f808be942255989e1_JaffaCakes118
Files
-
23998c94ad03868f808be942255989e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
4d77c9e7a1785ca90b5ec271434a845b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GlobalAlloc
SetThreadLocale
ResumeThread
CreateProcessA
lstrcatA
lstrcpyA
MulDiv
Sleep
VirtualProtectEx
LocalFree
ReadProcessMemory
OpenProcess
LocalAlloc
WriteProcessMemory
Process32Next
Process32First
CreateToolhelp32Snapshot
FindResourceA
Module32First
lstrlenA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CreateFileA
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
SizeofResource
LoadResource
GlobalSize
CreateThread
CloseHandle
Module32Next
GlobalFree
WriteFile
SetEndOfFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
ReadFile
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
user32
SetDlgItemTextA
BeginPaint
DialogBoxParamA
GetDlgItemTextA
MessageBoxW
SetDlgItemTextW
GetKeyState
CheckDlgButton
EndDialog
SetWindowTextA
EndPaint
GetDesktopWindow
GetWindowRect
SetWindowPos
DefWindowProcA
gdi32
GetDeviceCaps
advapi32
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
ole32
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
oleaut32
OleLoadPicture
winmm
PlaySoundA
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ