Static task
static1
Behavioral task
behavioral1
Sample
3369a1903599de8b045a0aef46647b0a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3369a1903599de8b045a0aef46647b0a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3369a1903599de8b045a0aef46647b0a_JaffaCakes118
-
Size
137KB
-
MD5
3369a1903599de8b045a0aef46647b0a
-
SHA1
8c40f37e1dd1fc94584ba529a4e501cb9f740fec
-
SHA256
f71ff60e674ccc7ed1db326a6b39d6f89e726a3f100cdd6ca46d707a9a3490c1
-
SHA512
587ec864f05a4800e8831a58608dfa4b9cf9b4b77dd49a1fa691f19966720ea48db89f063e6f854543af8ab6612545f5bb0b3679d1173cc0c7102fb28cdeac49
-
SSDEEP
3072:bJ2ZX3G4C8UboexBWjAI95J61Pu700Y9fQDL+jk:F2Z27fXI9q1P+DLW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3369a1903599de8b045a0aef46647b0a_JaffaCakes118
Files
-
3369a1903599de8b045a0aef46647b0a_JaffaCakes118.exe windows:5 windows x86 arch:x86
c325bd8a1fc9931eadf0ff5c127577f6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
CompareStringA
MultiByteToWideChar
SetHandleCount
SetEnvironmentVariableA
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RaiseException
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetStdHandle
WriteFile
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
HeapFree
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
ExitProcess
GetModuleHandleW
GetSystemTimeAsFileTime
lstrcpyA
CreateThread
OutputDebugStringA
CreateMutexA
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
lstrcmpiA
GetLastError
lstrlenW
lstrcatA
GetModuleFileNameW
ReadProcessMemory
Sleep
GetCommandLineA
OutputDebugStringW
WaitForSingleObject
GetCurrentProcess
lstrlenA
CompareStringW
lstrcmpA
user32
TrackMouseEvent
WaitForInputIdle
MessageBoxA
TileWindows
ValidateRgn
UpdateWindow
ValidateRect
VkKeyScanA
gdi32
GetPath
CreateDIBPatternBrush
GetTextMetricsW
GetICMProfileW
SetViewportOrgEx
ColorCorrectPalette
SetICMProfileA
GetTextExtentExPointI
SetTextColor
UpdateICMRegKeyW
CreateHatchBrush
StretchBlt
GetTextFaceA
SetArcDirection
SetMiterLimit
GetWinMetaFileBits
CreateHalftonePalette
RemoveFontMemResourceEx
UnrealizeObject
SelectObject
UpdateICMRegKeyA
SetRectRgn
CheckColorsInGamut
GetKerningPairsA
RemoveFontResourceExW
PlayEnhMetaFile
ColorMatchToTarget
CreateCompatibleBitmap
SetICMProfileW
GetPolyFillMode
SetDCPenColor
SetPolyFillMode
CombineTransform
ScaleViewportExtEx
SelectPalette
GetObjectW
GetTextExtentExPointW
GetTextFaceW
SetWorldTransform
PlgBlt
GetSystemPaletteEntries
CreatePatternBrush
ResetDCW
GetPixel
OffsetViewportOrgEx
GetTextCharset
GetTextColor
GetLayout
BitBlt
RemoveFontResourceA
SetWindowOrgEx
CreatePolygonRgn
GetMiterLimit
StrokePath
BeginPath
SelectClipPath
ole32
CoCreateInstance
Sections
.text Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ