Static task
static1
Behavioral task
behavioral1
Sample
25eca66d68741818099df3dee1288f9f_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
25eca66d68741818099df3dee1288f9f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
25eca66d68741818099df3dee1288f9f_JaffaCakes118
-
Size
352KB
-
MD5
25eca66d68741818099df3dee1288f9f
-
SHA1
c7f0b976af2766da5b2f6c5bec1e5d53609638b8
-
SHA256
5444204d1986e3c8ff446db6f9e87ea0576a1f13fefe85b2a483bfd45be01968
-
SHA512
c5a6e269d420648de7049aeaf9c0798af445c9cab5f7e953aa324ba5b67791124e2336e7584527d6b078e5b9291dd918006928a95c135430be974a72434442f6
-
SSDEEP
6144:OAwK9Kn8A7rM4IvkSk3PLQ3MiOqNgDKsIhsqvA1tsl7cjEQv6pSDzFwB:/kolvgfLqODKsIhsqvA1sAE1ez
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25eca66d68741818099df3dee1288f9f_JaffaCakes118
Files
-
25eca66d68741818099df3dee1288f9f_JaffaCakes118.exe windows:4 windows x86 arch:x86
3ae1c1429f500c1298a5300452887cb3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetConsoleTitleA
ReadConsoleOutputA
lstrcmpW
MoveFileExA
ReadConsoleOutputW
FreeLibraryAndExitThread
FlushFileBuffers
SetThreadPriority
CreateMailslotW
VirtualUnlock
GlobalFindAtomW
FillConsoleOutputAttribute
CreateSemaphoreA
FindNextFileW
VirtualAllocEx
ClearCommError
SetThreadIdealProcessor
WriteConsoleOutputW
VirtualProtect
GetLogicalDriveStringsA
SetTapePosition
FindCloseChangeNotification
ExpandEnvironmentStringsW
LocalLock
VirtualQuery
GetModuleFileNameW
MapViewOfFile
CreatePipe
GetStartupInfoW
CreateFiber
_hread
WriteFileGather
GetProfileStringW
ReadConsoleW
SetProcessWorkingSetSize
GetPrivateProfileSectionW
LCMapStringA
GetTimeFormatA
FreeLibrary
DuplicateHandle
ReleaseMutex
SetFileTime
RemoveDirectoryA
DeleteAtom
GetShortPathNameA
lstrcmpiW
IsValidLocale
GetStringTypeW
GetACP
LoadResource
GetBinaryTypeA
TerminateThread
lstrcpyA
DosDateTimeToFileTime
GetWindowsDirectoryW
SetThreadPriorityBoost
OpenProcess
DeleteFileA
VirtualAlloc
ReadConsoleInputA
CreateEventW
SleepEx
SetCurrentDirectoryW
FlushConsoleInputBuffer
VirtualLock
_lread
SetCurrentDirectoryA
SetStdHandle
SetTapeParameters
EnumDateFormatsW
UnlockFileEx
CreateFileA
MultiByteToWideChar
CreateDirectoryExA
SetCommTimeouts
HeapAlloc
GetTickCount
GetLocaleInfoA
GetCommandLineA
GetVersionExA
WritePrivateProfileSectionW
ExitProcess
user32
TrackMouseEvent
SetWindowRgn
GetDCEx
ClipCursor
SetClassLongW
SetClipboardData
GetWindowLongA
OpenWindowStationW
RegisterWindowMessageW
CheckMenuRadioItem
DefMDIChildProcA
BeginDeferWindowPos
CallNextHookEx
EnumDesktopWindows
KillTimer
SetMenuItemInfoW
InvalidateRect
gdi32
SetMapperFlags
EnumFontsA
BeginPath
CreateHalftonePalette
GetBkMode
GetObjectType
Polyline
CreateMetaFileA
GetTextExtentExPointW
SetBkMode
FrameRgn
GetCurrentPositionEx
advapi32
CryptSetProvParam
GetSecurityInfo
MakeAbsoluteSD
CryptSetKeyParam
CryptAcquireContextA
RegDeleteValueA
RegQueryValueW
GetPrivateObjectSecurity
ChangeServiceConfigA
RegEnumValueW
GetSecurityDescriptorLength
RegisterEventSourceW
EnumServicesStatusW
ole32
CoMarshalInterface
CoSetProxyBlanket
oleaut32
SafeArrayCreate
QueryPathOfRegTypeLi
VariantClear
SafeArrayGetElement
SafeArrayAccessData
VariantCopy
SafeArrayPutElement
VariantChangeType
VariantChangeTypeEx
SafeArrayRedim
RegisterTypeLi
comctl32
ImageList_GetImageCount
ord17
shlwapi
StrStrA
UrlCreateFromPathW
PathFindFileNameA
SHEnumValueW
UrlCanonicalizeW
PathSkipRootW
StrCmpNIA
setupapi
SetupDiDeleteDeviceInfo
SetupLogErrorA
SetupFindFirstLineW
SetupOpenAppendInfFileA
SetupDiEnumDeviceInterfaces
SetupDiSetDeviceInstallParamsW
SetupDiClassGuidsFromNameW
SetupDiEnumDriverInfoA
SetupDiOpenDeviceInterfaceW
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInfoW
Sections
.text Size: 292KB - Virtual size: 290KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE