Static task
static1
Behavioral task
behavioral1
Sample
27c4024fe4578181b4de7ef302cdba4b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27c4024fe4578181b4de7ef302cdba4b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27c4024fe4578181b4de7ef302cdba4b_JaffaCakes118
-
Size
328KB
-
MD5
27c4024fe4578181b4de7ef302cdba4b
-
SHA1
4b0b20518509dcbae6e772587f482b9004d9523c
-
SHA256
888a10c0068d70474ea70e551c00d16a6293e0d5b30ee710424455e4fc236600
-
SHA512
d0384cdf5732ebc8688b778798670d40c911c7295e0fb9e25597c9ac328500fafb2f70a4910b270100310704b51cd9f7cad9127eca365b5781509886bb4463de
-
SSDEEP
6144:za3UPV1iyOSi3KcRg1vufzlQr1bUBhf7d9ZJIp6e0if1k/L5XiNICW+FT7sJu:zG+iqeKcEGf5Qcd9/glf1kaPj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27c4024fe4578181b4de7ef302cdba4b_JaffaCakes118
Files
-
27c4024fe4578181b4de7ef302cdba4b_JaffaCakes118.exe windows:4 windows x86 arch:x86
d34eb015c9843283c44cd1fc9aab7479
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
SetConsoleMode
GetModuleHandleA
SetUnhandledExceptionFilter
GetComputerNameW
FileTimeToDosDateTime
ReadConsoleInputA
EnumResourceLanguagesW
InterlockedCompareExchange
SwitchToThread
SetFileAttributesW
CloseHandle
SetThreadExecutionState
GlobalFlags
GetTapeStatus
LocalAlloc
GetNumberFormatA
GetDiskFreeSpaceExA
GetPriorityClass
LocalFree
CopyFileW
GetTempFileNameA
GetProfileIntW
GetTickCount
CreateMailslotW
ConvertThreadToFiber
AddAtomW
GetDriveTypeA
DisconnectNamedPipe
WriteProfileStringW
LockFileEx
WaitNamedPipeA
CreateWaitableTimerA
GetSystemDefaultLCID
TlsGetValue
GetVolumeInformationA
MapViewOfFileEx
GetVersionExA
GlobalLock
SearchPathA
SetVolumeLabelW
GetDiskFreeSpaceW
VirtualAlloc
ClearCommBreak
SetEndOfFile
ExpandEnvironmentStringsA
GetCommandLineA
VirtualProtect
GetAtomNameW
ExitProcess
user32
GetSystemMenu
GetClipboardFormatNameW
PeekMessageW
OpenDesktopA
AttachThreadInput
SetUserObjectInformationW
GetUpdateRect
GetProcessWindowStation
MapWindowPoints
GrayStringW
GetWindowInfo
DrawFocusRect
SetClassLongW
ExcludeUpdateRgn
InflateRect
GetMessageTime
VkKeyScanA
CharUpperW
CreateWindowStationW
GetWindowTextLengthW
DrawAnimatedRects
ClientToScreen
CharLowerW
GetScrollInfo
GetKeyNameTextW
MapDialogRect
EnumWindowStationsA
GetMenuItemID
CharPrevW
FlashWindow
SetWindowsHookExW
MsgWaitForMultipleObjects
FillRect
IsDlgButtonChecked
GetNextDlgTabItem
GetWindowRgn
GetAncestor
DefWindowProcW
EndDialog
SendInput
DialogBoxParamW
GetWindowPlacement
gdi32
CreateDCA
IntersectClipRect
SetBkColor
DeleteDC
GetStretchBltMode
CreateFontW
CreateDIBitmap
CreateCompatibleBitmap
SetWinMetaFileBits
SetTextColor
DeleteMetaFile
SetColorAdjustment
GetCharacterPlacementA
AbortDoc
ScaleWindowExtEx
GdiComment
GetEnhMetaFileBits
CreateFontIndirectW
SetDIBColorTable
GetMetaFileBitsEx
CopyEnhMetaFileA
comdlg32
GetSaveFileNameW
ChooseFontW
advapi32
RegisterServiceCtrlHandlerA
DestroyPrivateObjectSecurity
ole32
CoSwitchCallContext
SetConvertStg
OleRegGetMiscStatus
oleaut32
CreateErrorInfo
GetActiveObject
SafeArrayGetElement
LoadTypeLi
SafeArrayCreateVector
VariantCopy
SetErrorInfo
LoadTypeLibEx
GetErrorInfo
SysAllocString
comctl32
ImageList_DragLeave
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_Duplicate
shlwapi
PathUndecorateW
PathRenameExtensionW
PathFindFileNameA
SHSetThreadRef
PathParseIconLocationW
StrRChrW
StrCatBuffW
AssocQueryKeyW
SHRegCloseUSKey
SHRegCreateUSKeyW
PathCommonPrefixW
StrStrIW
PathUnquoteSpacesW
StrRetToBufW
PathFindNextComponentW
StrChrIA
setupapi
SetupCommitFileQueueA
SetupDiSetDeviceInstallParamsW
Sections
.text Size: 276KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE