Static task
static1
Behavioral task
behavioral1
Sample
273235bf5e974f18510cf5edff264881_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
273235bf5e974f18510cf5edff264881_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
273235bf5e974f18510cf5edff264881_JaffaCakes118
-
Size
529KB
-
MD5
273235bf5e974f18510cf5edff264881
-
SHA1
b7b43b9a970e1fdadacb8c057c05fa5fcf53107d
-
SHA256
7a654a93d1def426085ebf3c41ce8a529f7e0738569c6042d2e3d78279dd0025
-
SHA512
813fac2663c965cc6fda505c48dd41082cf17e43bbd62186da36bc3381e2940cc03cb14ed6dc801f2e8755acc46feb91d39a8023c6a388fc91fac7e220f2cffd
-
SSDEEP
12288:4kaGYDufTMs0khF9YNXB2b6rUb2b0AnfEEZ:oGYSfTkkhF9YNUb2b0o5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 273235bf5e974f18510cf5edff264881_JaffaCakes118
Files
-
273235bf5e974f18510cf5edff264881_JaffaCakes118.exe windows:4 windows x86 arch:x86
f7dc94c3b1efe56aa6ea3f3f3d2b06a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
GetSysColorBrush
IsCharLowerA
UpdateWindow
DrawFocusRect
CharPrevA
SetActiveWindow
CreateIconFromResourceEx
SetMenuInfo
ChangeDisplaySettingsExW
GetMenu
LoadCursorFromFileA
RegisterHotKey
SendMessageTimeoutW
RegisterClassExA
DdeQueryStringA
CreateMDIWindowW
CreateIconFromResource
RegisterClassA
advapi32
DuplicateToken
CryptCreateHash
kernel32
GetStartupInfoW
InitializeCriticalSection
SetFilePointer
TlsSetValue
GetProcessHeap
GetCPInfo
IsDebuggerPresent
GetStartupInfoA
IsValidLocale
TerminateProcess
LoadLibraryA
MultiByteToWideChar
FreeEnvironmentStringsW
LeaveCriticalSection
GetModuleHandleA
VirtualQuery
FreeEnvironmentStringsA
LCMapStringW
TlsGetValue
GetConsoleOutputCP
GetLocaleInfoW
GetTimeZoneInformation
UnhandledExceptionFilter
GetProcAddress
GetStringTypeW
IsValidCodePage
GetCurrentThreadId
CreateMutexA
HeapDestroy
HeapReAlloc
WriteFile
TlsFree
InterlockedDecrement
GetCommandLineA
GetUserDefaultLCID
SetConsoleCtrlHandler
GetCompressedFileSizeA
Sleep
GetCommandLineW
GetEnvironmentStringsW
HeapAlloc
OpenMutexA
GetLocaleInfoA
CreateFileA
SetEnvironmentVariableA
OpenMutexW
GetCurrentProcessId
SetStdHandle
GetConsoleCP
RtlUnwind
GetStdHandle
GetCurrentThread
VirtualFree
TlsAlloc
GetConsoleMode
GetDateFormatA
GetVersionExA
EnterCriticalSection
SetHandleCount
GetACP
InterlockedExchange
VirtualAlloc
ReadFile
FlushFileBuffers
GetSystemTimeAsFileTime
DeleteCriticalSection
HeapFree
CompareStringW
QueryPerformanceCounter
GetEnvironmentStrings
CloseHandle
WideCharToMultiByte
InterlockedIncrement
WriteProfileSectionW
GetStringTypeA
EnumResourceNamesA
GetFileType
HeapCreate
HeapSize
EnumSystemLocalesA
GetTickCount
GetOEMCP
GetModuleFileNameW
SetUnhandledExceptionFilter
GetLastError
WriteConsoleA
SetLastError
GetCurrentProcess
LCMapStringA
CompareStringA
GetTimeFormatA
WriteConsoleW
ExitProcess
FreeLibrary
GetModuleFileNameA
gdi32
GetAspectRatioFilterEx
CloseFigure
Chord
PlayMetaFileRecord
OffsetRgn
GetCharWidthA
GetKerningPairs
GdiGetBatchLimit
wininet
HttpAddRequestHeadersA
FtpDeleteFileW
GetUrlCacheHeaderData
InternetCanonicalizeUrlW
GopherOpenFileW
Sections
.text Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ