Static task
static1
Behavioral task
behavioral1
Sample
265ec2b79693879e7cd9d52b707fc7c9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
265ec2b79693879e7cd9d52b707fc7c9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
265ec2b79693879e7cd9d52b707fc7c9_JaffaCakes118
-
Size
364KB
-
MD5
265ec2b79693879e7cd9d52b707fc7c9
-
SHA1
740e88977f5248315933f170c2c3911d5f6d9b64
-
SHA256
881df796f3a73de25ffe9086f8fe7d9e4ba97de654e7b48b168bea8dbbf849be
-
SHA512
ca5d4f567a6d0a22f3bbd57783938d5ca9bd93b2a32896d7c238754075a5e0de6acf78676a375f6f8343ca9645ad9555150cb90d40e350aea6d862c3b7174762
-
SSDEEP
6144:Lg13tzt+esYvZXl2aZhOmMxvJ+qmbLlD4LPCCpXoU6jkLX0MSGtCHc4:LgptJjsYTu/RmxD4r7pooX0MC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 265ec2b79693879e7cd9d52b707fc7c9_JaffaCakes118
Files
-
265ec2b79693879e7cd9d52b707fc7c9_JaffaCakes118.exe windows:4 windows x86 arch:x86
cf306194a4fc8b0a321d6acd7a6ea4bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadStringPtrA
ScrollConsoleScreenBufferA
DeleteCriticalSection
CreateIoCompletionPort
lstrcpynA
GetCompressedFileSizeW
LCMapStringA
SetEnvironmentVariableA
LocalReAlloc
IsValidLocale
GlobalDeleteAtom
LocalLock
EnumDateFormatsW
VirtualQueryEx
ConnectNamedPipe
SetErrorMode
IsProcessorFeaturePresent
GetDateFormatA
PeekNamedPipe
FlushConsoleInputBuffer
GetVersion
GetModuleHandleA
CompareStringA
ExitProcess
GetTempPathW
GetTickCount
SetThreadPriorityBoost
EnumResourceNamesW
FatalAppExitA
GetStartupInfoA
GetProfileStringA
EnumResourceNamesA
CreateMutexW
GetBinaryTypeW
SetProcessWorkingSetSize
WaitNamedPipeA
GetFileAttributesExA
DeleteFiber
GetTapeParameters
OpenMutexA
PrepareTape
SetProcessShutdownParameters
FindResourceExA
VirtualAlloc
AllocConsole
lstrcmpA
SetHandleCount
CloseHandle
_llseek
WritePrivateProfileSectionW
FindFirstFileA
SetConsoleActiveScreenBuffer
lstrcmpiA
GetBinaryTypeA
SwitchToFiber
LocalFileTimeToFileTime
_lread
WriteConsoleOutputW
SetThreadLocale
CreateMutexA
WritePrivateProfileStringA
GetVersionExA
SystemTimeToFileTime
CreateNamedPipeW
VirtualFree
RaiseException
_lopen
SetFileAttributesA
GetSystemDirectoryW
GetHandleInformation
CreateDirectoryW
CreateWaitableTimerA
EraseTape
FillConsoleOutputCharacterA
LoadResource
GetCommandLineA
GetEnvironmentStringsW
VirtualProtect
user32
GetDCEx
GetWindowWord
EndPaint
CascadeWindows
CallWindowProcW
CharNextExA
GetNextDlgTabItem
SetClipboardData
GetKeyNameTextA
SetClipboardViewer
LoadKeyboardLayoutA
GetMenuItemCount
SetClassLongA
GetMenuState
SetMenuItemInfoA
IsMenu
AttachThreadInput
OemToCharBuffW
CountClipboardFormats
GetClipboardSequenceNumber
GetClassLongA
GetDC
CloseWindow
EnableMenuItem
SetParent
GetClassInfoExW
ChangeMenuA
GetUserObjectInformationW
PostThreadMessageA
SetWindowsHookExA
DestroyMenu
IsCharAlphaW
CharLowerBuffW
GetKeyboardLayoutNameA
SystemParametersInfoA
DialogBoxIndirectParamW
EnumDisplaySettingsExA
GetMenuStringA
LoadCursorA
WinHelpW
GrayStringW
DrawTextExW
ExitWindowsEx
GetProcessDefaultLayout
WaitMessage
PeekMessageA
LoadCursorW
GetMessageTime
ScreenToClient
SetMenuInfo
CreateWindowExA
GetPropW
CreateDialogIndirectParamW
IntersectRect
TrackPopupMenuEx
InsertMenuItemW
GetSystemMetrics
SetFocus
gdi32
CreateHatchBrush
GetClipRgn
CreatePolygonRgn
GetCharWidthA
RemoveFontResourceA
SetPolyFillMode
CreateEllipticRgnIndirect
SetGraphicsMode
GetGlyphOutlineW
SetBitmapBits
AbortDoc
GetNearestColor
CreatePen
comdlg32
ReplaceTextW
ChooseColorA
shell32
SHChangeNotify
FindExecutableA
ole32
StgOpenStorage
OleCreateLink
OleSaveToStream
oleaut32
SetErrorInfo
SafeArrayPutElement
SafeArrayCreate
QueryPathOfRegTypeLi
SysFreeString
SysAllocStringLen
SysStringLen
LoadTypeLi
SafeArrayUnaccessData
SafeArrayRedim
comctl32
PropertySheetW
shlwapi
wvnsprintfW
PathCommonPrefixW
SHRegSetUSValueW
StrStrIA
wnsprintfW
HashData
SHCopyKeyW
SHRegCreateUSKeyW
StrCmpIW
SHAutoComplete
setupapi
SetupDiGetDeviceInfoListDetailA
SetupDiGetClassDevsW
Sections
NEnYN Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
gbbpC Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
bNWHmdD Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
efXEWjU Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ