Static task
static1
Behavioral task
behavioral1
Sample
3577620c2b2e0b3d402bf8cff506b2bd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3577620c2b2e0b3d402bf8cff506b2bd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3577620c2b2e0b3d402bf8cff506b2bd_JaffaCakes118
-
Size
748KB
-
MD5
3577620c2b2e0b3d402bf8cff506b2bd
-
SHA1
0bd1a3b90458838eea5bdb8399121d8eacf389d8
-
SHA256
8bdd889934401be0215d93ccc2c443ae1b0efc4b8cbd82e9495262f6dac915a4
-
SHA512
307237e5a1a77f33cc94c6b243550e3bd24c7cd2a1fe30687d7529640bad245b9e2e898c71cf1e59551b8bea3d8210e8cf3c5f40ac13fcd21fcb78c5f4b9c781
-
SSDEEP
12288:+6mxuzqmc1SZhB+8H8XkRJ023VMUm0i/UQW60g+dTqiEQGnxxxIanPaExU0bUxYi:+6Fq8/R/Mj0jQIZQiEQGjxROYaD/d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3577620c2b2e0b3d402bf8cff506b2bd_JaffaCakes118
Files
-
3577620c2b2e0b3d402bf8cff506b2bd_JaffaCakes118.exe windows:4 windows x86 arch:x86
93d0cb47e570abe7cf44dc3ac8776b5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
WritePrivateProfileStructW
CompareStringW
CompareStringA
CreateWaitableTimerA
GetVersionExA
MultiByteToWideChar
GetStdHandle
QueryPerformanceCounter
SetFilePointer
GetModuleFileNameA
RaiseException
CloseHandle
InterlockedExchange
DebugBreak
GetStartupInfoW
HeapAlloc
SetStdHandle
InterlockedDecrement
WriteConsoleOutputA
GetCurrentProcessId
lstrcmpA
GetLocaleInfoW
TlsFree
SetConsoleCtrlHandler
GetStartupInfoA
FreeEnvironmentStringsA
GetConsoleMode
SetEnvironmentVariableA
GetFileType
LeaveCriticalSection
GetEnvironmentStringsW
HeapCreate
GetStringTypeW
LCMapStringA
TerminateProcess
GetLogicalDrives
EnterCriticalSection
HeapReAlloc
GetEnvironmentStrings
GetLastError
WriteConsoleA
GetTickCount
GetPrivateProfileIntA
GetLocaleInfoA
GetCurrentThreadId
GetACP
GetDateFormatA
IsValidCodePage
GetOEMCP
OutputDebugStringW
GetTimeFormatA
HeapFree
VirtualFree
lstrlenA
GetProcessHeap
CreateFileA
GetCommandLineA
DeleteCriticalSection
GetConsoleOutputCP
RtlUnwind
WriteFile
GetTimeZoneInformation
TlsAlloc
GetModuleFileNameW
GetCurrentThread
LoadLibraryA
LoadLibraryW
CreateMutexA
FreeLibrary
SetHandleCount
HeapValidate
GetProcAddress
ReadFile
OpenMutexA
WideCharToMultiByte
IsValidLocale
InitializeCriticalSection
HeapDestroy
TlsGetValue
WriteConsoleW
GetCommandLineW
GetCurrentProcess
SetLastError
ExitProcess
IsBadReadPtr
SetUnhandledExceptionFilter
InterlockedIncrement
GetCPInfo
GetStringTypeA
VirtualQuery
OutputDebugStringA
IsDebuggerPresent
GetUserDefaultLCID
GetModuleHandleA
EnumSystemLocalesA
GetConsoleCP
FlushFileBuffers
TlsSetValue
LCMapStringW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
UnhandledExceptionFilter
comctl32
DestroyPropertySheetPage
ImageList_SetOverlayImage
ImageList_AddMasked
ImageList_LoadImageA
ImageList_Destroy
InitCommonControlsEx
ImageList_DragEnter
ImageList_GetFlags
DrawInsert
MakeDragList
ImageList_DragLeave
CreateMappedBitmap
ImageList_DrawEx
CreateToolbarEx
GetEffectiveClientRect
CreateUpDownControl
ImageList_Remove
ImageList_GetDragImage
ImageList_SetFlags
ImageList_Create
ImageList_GetIconSize
CreateStatusWindowA
user32
CheckMenuItem
RemovePropW
ToUnicode
RegisterDeviceNotificationA
MessageBoxA
DefWindowProcA
RealChildWindowFromPoint
ShowWindow
SetParent
EndTask
GetMonitorInfoA
RegisterDeviceNotificationW
GetTabbedTextExtentA
GetSysColorBrush
ChangeDisplaySettingsExW
LoadBitmapA
RegisterClassExA
CopyAcceleratorTableW
SetThreadDesktop
DestroyWindow
PostMessageW
DlgDirListA
EnumClipboardFormats
FillRect
DlgDirListW
RegisterClassA
OpenDesktopW
SetMenuItemInfoA
DdeUninitialize
GetClassInfoA
ClientToScreen
CreateWindowExW
SetWindowPlacement
ShowCursor
Sections
.text Size: 296KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 284KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ