Static task
static1
Behavioral task
behavioral1
Sample
298f6da1b1ed1ecd560a8e0824fea7d8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
298f6da1b1ed1ecd560a8e0824fea7d8_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
298f6da1b1ed1ecd560a8e0824fea7d8_JaffaCakes118
-
Size
308KB
-
MD5
298f6da1b1ed1ecd560a8e0824fea7d8
-
SHA1
20cc4b4ea12dc2969c2cee874e4535c6460e7424
-
SHA256
011ae0108757c4620aa6b25483d2d8d6ea6c8db8a75a8e59b8610fc9cf0c18e7
-
SHA512
5328166b92e67e98be03ad22679cce7da69b9bce7bbe3266663c4c7cb1e785eca166a30bacf7bdc90a3ee6283b979a107aa658950f6123e83e7d68277f6f1ecb
-
SSDEEP
6144:UWUGY877VQl8ijP8RO/hXEHVr8ac+nDktqVnRCg6kP4JAqJkP:UWU87KllqIuHSsnDxnRCgT3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 298f6da1b1ed1ecd560a8e0824fea7d8_JaffaCakes118
Files
-
298f6da1b1ed1ecd560a8e0824fea7d8_JaffaCakes118.exe windows:4 windows x86 arch:x86
401db5367e36bb31ca491d4acdd401cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumTimeFormatsW
OpenMutexA
GetTickCount
SetEndOfFile
GetFileType
EnumDateFormatsW
WaitNamedPipeA
ExpandEnvironmentStringsW
SetConsoleActiveScreenBuffer
ReadConsoleInputW
PeekNamedPipe
FindResourceExW
VirtualFree
ExitProcess
lstrcmpA
CreateWaitableTimerA
IsValidLocale
GetDiskFreeSpaceExA
EraseTape
OpenFile
LoadResource
LCMapStringA
VirtualUnlock
CreateDirectoryA
GlobalFindAtomA
GetConsoleCursorInfo
_lclose
SetConsoleMode
ReadFile
SetFileTime
GetCommConfig
GetVersionExA
VirtualProtect
MoveFileW
SuspendThread
SetVolumeLabelA
FileTimeToLocalFileTime
SetSystemTime
SearchPathW
LeaveCriticalSection
_lread
SetEvent
SetConsoleOutputCP
GetBinaryTypeW
GetFileAttributesA
CopyFileExW
FormatMessageW
GetConsoleMode
FindFirstFileExW
DeleteFiber
SetThreadLocale
EnumResourceLanguagesW
GlobalDeleteAtom
InitializeCriticalSection
GetTapeStatus
GetCommState
GetSystemTime
CreateIoCompletionPort
GetLogicalDriveStringsA
WritePrivateProfileSectionW
GetDriveTypeA
GlobalFree
GetThreadContext
GlobalReAlloc
GetCurrentDirectoryW
_hread
IsBadReadPtr
GetStringTypeExW
SetCurrentDirectoryA
GetCommandLineA
GlobalAddAtomW
lstrlenA
user32
LoadMenuA
OpenWindowStationW
EnumDisplayDevicesA
UpdateWindow
GetWindowContextHelpId
GetCaretPos
OemToCharBuffW
GetIconInfo
ScrollDC
SetWindowsHookExW
GetDCEx
GetShellWindow
SetWindowLongA
CharNextA
IsChild
TabbedTextOutA
GetThreadDesktop
DrawStateA
UnloadKeyboardLayout
GetMonitorInfoA
PeekMessageW
DefWindowProcA
GetSystemMenu
MessageBoxExA
RegisterDeviceNotificationA
RegisterClassA
CharNextExA
KillTimer
PostMessageA
GetScrollInfo
GetWindowRgn
CallWindowProcA
GetWindowTextA
SendNotifyMessageA
SendMessageCallbackW
FindWindowExA
TranslateMDISysAccel
OpenWindowStationA
NotifyWinEvent
CheckMenuItem
GetDoubleClickTime
CharToOemW
gdi32
Chord
EnumEnhMetaFile
CopyEnhMetaFileA
CreateDCA
DeleteDC
CloseMetaFile
StartDocA
PolyPolyline
SetStretchBltMode
CloseEnhMetaFile
CreateHatchBrush
GetEnhMetaFileHeader
GetTextFaceW
FrameRgn
DeleteEnhMetaFile
SaveDC
PolyDraw
GetCharWidthA
CreateRoundRectRgn
PatBlt
CreateDiscardableBitmap
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
AllocateAndInitializeSid
LookupAccountSidA
IsValidSecurityDescriptor
RegCreateKeyExW
RegRestoreKeyA
AccessCheckAndAuditAlarmA
NotifyChangeEventLog
ImpersonateNamedPipeClient
RegDeleteKeyA
RegEnumKeyA
CryptDestroyHash
LookupPrivilegeValueW
shell32
SHFileOperationW
SHGetDesktopFolder
SHGetSpecialFolderPathW
SHChangeNotify
SHGetSettings
ole32
PropVariantCopy
MkParseDisplayName
CoGetClassObject
CoMarshalInterThreadInterfaceInStream
OleIsRunning
CoMarshalInterface
StgSetTimes
OleCreateLink
oleaut32
SafeArrayCreate
VariantCopy
SysFreeString
LoadTypeLi
SetErrorInfo
comctl32
ImageList_GetDragImage
ImageList_GetImageInfo
ImageList_SetImageCount
shlwapi
PathAddBackslashW
setupapi
SetupDiBuildDriverInfoList
SetupDiGetDriverInfoDetailW
SetupDiClassNameFromGuidExA
SetupGetIntField
SetupDiDeleteDeviceInfo
Sections
.text Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE