Static task
static1
Behavioral task
behavioral1
Sample
243a643fb080ba519bb1532ce9cc7120_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
243a643fb080ba519bb1532ce9cc7120_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
243a643fb080ba519bb1532ce9cc7120_JaffaCakes118
-
Size
406KB
-
MD5
243a643fb080ba519bb1532ce9cc7120
-
SHA1
4dcd0bf3b1f77fb8fc13be8c071bf9a4c51f76b0
-
SHA256
29dcb98e5e65973db57884a435998d0663ca98119d6eebece8e9bcb58d2aff3e
-
SHA512
7042b8f6aa92a3790ff998d516b3d35b7bac83b1c68d5673351cc3e315413d5bb9e1c4f32cb79313228c653cadbde7d62e36b16631ed85386329bb7fdb2caa50
-
SSDEEP
12288:c1Bc4+FAwDvtxoiJffD0YTJZ1rJoWS0RZ:c1ZrmtxtDtrJR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 243a643fb080ba519bb1532ce9cc7120_JaffaCakes118
Files
-
243a643fb080ba519bb1532ce9cc7120_JaffaCakes118.exe windows:4 windows x86 arch:x86
1c6c56d7ccb8bcc5ea9e90b8ef5201b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SetBoundsRect
GetClipRgn
CreateICW
GetCharWidthFloatW
LineDDA
FixBrushOrgEx
GetNearestColor
SetBitmapDimensionEx
EnumFontFamiliesExW
CancelDC
GetGlyphOutlineA
CreateRectRgnIndirect
EqualRgn
PolyBezier
GetEnhMetaFilePaletteEntries
ColorCorrectPalette
GetAspectRatioFilterEx
SetPaletteEntries
GetMetaFileA
EnumFontFamiliesExA
SetArcDirection
SetRectRgn
comdlg32
FindTextW
advapi32
RegEnumValueA
CryptSetHashParam
AbortSystemShutdownW
LogonUserW
CryptDestroyKey
RegEnumKeyExW
CryptSetProviderA
CryptExportKey
RegDeleteValueA
CryptGetUserKey
DuplicateToken
CryptReleaseContext
CryptContextAddRef
CryptDuplicateKey
user32
OemToCharW
RegisterClassExA
OemKeyScan
EqualRect
GetClassLongA
CreateDialogParamA
AttachThreadInput
SetUserObjectInformationA
kernel32
SetEnvironmentVariableA
WriteConsoleOutputCharacterA
WideCharToMultiByte
VirtualAlloc
GetStringTypeA
InterlockedDecrement
LCMapStringW
CompareStringW
InterlockedExchange
GetStartupInfoA
IsValidCodePage
TlsGetValue
EnumCalendarInfoExW
GetModuleHandleA
GetCPInfo
VirtualQuery
IsDebuggerPresent
TlsFree
GetProcAddress
GetCommandLineA
InitializeCriticalSectionAndSpinCount
FreeLibrary
FreeEnvironmentStringsW
HeapReAlloc
SetUnhandledExceptionFilter
IsValidLocale
HeapCreate
GetDateFormatA
FreeEnvironmentStringsA
HeapFree
GetSystemTimeAsFileTime
GetACP
ReadConsoleInputW
MultiByteToWideChar
GetLastError
LCMapStringA
SetConsoleCtrlHandler
GetTimeZoneInformation
GetProfileIntW
LeaveCriticalSection
UnhandledExceptionFilter
GetCurrencyFormatA
GetLocaleInfoA
GetPrivateProfileSectionA
SetHandleCount
Sleep
GetModuleHandleW
GetUserDefaultLCID
SetLastError
CreateDirectoryExA
GetCurrentProcessId
TlsAlloc
LoadLibraryA
GetLocaleInfoW
WritePrivateProfileStructA
GetTickCount
QueryPerformanceCounter
VirtualFree
GetStartupInfoW
TerminateProcess
GetFileAttributesExW
TlsSetValue
GetCurrentThread
SetConsoleWindowInfo
GetCurrentThreadId
HeapDestroy
EnterCriticalSection
GetCurrentProcess
HeapSize
RtlUnwind
GetFileType
HeapAlloc
DeleteCriticalSection
CompareStringA
GetEnvironmentStrings
GetOEMCP
GetStringTypeW
GetModuleFileNameA
GetTimeFormatA
ExitProcess
GetStdHandle
WriteFile
LocalShrink
InterlockedIncrement
EnumSystemLocalesA
GetEnvironmentStringsW
wininet
InternetCheckConnectionA
InternetCreateUrlA
InternetGetCookieA
FindNextUrlCacheGroup
FreeUrlCacheSpaceW
UnlockUrlCacheEntryStream
InternetWriteFileExA
GopherGetLocatorTypeW
CommitUrlCacheEntryA
FindFirstUrlCacheContainerW
InternetAutodial
DeleteUrlCacheContainerA
FtpGetCurrentDirectoryA
InternetGetCertByURLA
RetrieveUrlCacheEntryFileA
HttpQueryInfoA
SetUrlCacheConfigInfoA
InternetErrorDlg
FindFirstUrlCacheContainerA
InternetOpenUrlA
InternetQueryFortezzaStatus
InternetQueryOptionA
InternetSecurityProtocolToStringW
IncrementUrlCacheHeaderData
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 273KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ