Static task
static1
Behavioral task
behavioral1
Sample
3afa7a9a40468131a83adb471cc58eb4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3afa7a9a40468131a83adb471cc58eb4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3afa7a9a40468131a83adb471cc58eb4_JaffaCakes118
-
Size
358KB
-
MD5
3afa7a9a40468131a83adb471cc58eb4
-
SHA1
81ae9a75ce01d7984910c0a1787370110dcedb43
-
SHA256
375a689b65bdc356cf8d517ba0007329cc767796de55707b64b619be59069c54
-
SHA512
73b50374e07d1da852bb50c1ed4d502aa07780a635e1131efeedca5d4162dfd7fb5bb595b3b7d99d674348b23856e31258860052483c0d286cd3f2e49f98b641
-
SSDEEP
6144:nJ3hEOP3MIp3dS/LhB3n8liX043m3azS7cA9SKpfmZS2hlDtRgICb4kiR3tHe:nFhEOP3XxdSDw2043m3azhYleY8lhZCm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3afa7a9a40468131a83adb471cc58eb4_JaffaCakes118
Files
-
3afa7a9a40468131a83adb471cc58eb4_JaffaCakes118.exe windows:4 windows x86 arch:x86
3218c76ce4a56444e48f90f5fcc176f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
RegisterClassExA
GetProcessWindowStation
EnumDisplayDevicesA
DialogBoxIndirectParamW
SetClassLongW
SendIMEMessageExA
GetListBoxInfo
GrayStringA
OemToCharW
PeekMessageA
GetCapture
NotifyWinEvent
CloseDesktop
GetMenuContextHelpId
FrameRect
GetSysColor
RegisterClassA
DrawIconEx
DlgDirSelectComboBoxExA
LoadImageW
CharToOemW
InflateRect
gdi32
GetPath
kernel32
SetHandleCount
SetConsoleOutputCP
SetEnvironmentVariableA
WaitNamedPipeW
InitializeCriticalSection
GetCurrentProcessId
SetConsoleActiveScreenBuffer
ReadFile
GetConsoleTitleA
IsValidLocale
GetTimeZoneInformation
GetWindowsDirectoryA
WriteConsoleInputW
QueryPerformanceCounter
CompareStringA
RtlUnwind
GetStdHandle
FlushFileBuffers
FindResourceA
GlobalAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetDiskFreeSpaceA
EnumDateFormatsW
OutputDebugStringA
GetTempPathW
GetThreadTimes
GlobalAddAtomA
GetStringTypeA
GlobalDeleteAtom
CreateFileMappingW
CompareStringW
TlsFree
GetEnvironmentStringsW
GetLocaleInfoA
HeapDestroy
SetEnvironmentVariableW
GetCurrentProcess
IsBadWritePtr
CreateRemoteThread
HeapReAlloc
FindNextChangeNotification
CreatePipe
GetVersionExA
SetConsoleTextAttribute
OpenEventW
GetComputerNameA
GetSystemTime
IsValidCodePage
VirtualProtect
GetProfileIntW
WideCharToMultiByte
OpenMutexA
SetConsoleCtrlHandler
GetSystemTimeAsFileTime
GetProfileSectionA
LeaveCriticalSection
HeapFree
UnlockFileEx
GetStringTypeW
LoadLibraryA
MultiByteToWideChar
WriteFile
GetModuleFileNameW
GetStartupInfoW
TlsGetValue
InterlockedExchange
SetStdHandle
FreeEnvironmentStringsA
WaitForSingleObject
RtlZeroMemory
GetCurrentThread
ExitProcess
GetEnvironmentStrings
GetSystemDefaultLCID
GetTimeFormatA
TerminateProcess
GetSystemInfo
EnumSystemLocalesA
TlsAlloc
LCMapStringA
InterlockedDecrement
SetConsoleTitleA
TlsSetValue
SetFilePointer
LoadModule
GetUserDefaultLCID
GetOEMCP
GetLastError
InterlockedIncrement
VirtualProtectEx
GetModuleFileNameA
LockFile
CreateMutexA
GetFileTime
FindFirstFileExA
LoadResource
GetACP
GetCPInfo
FillConsoleOutputCharacterA
GetCommandLineA
GetCurrentThreadId
IsBadReadPtr
WaitForDebugEvent
lstrcmpiA
VirtualAlloc
SetLocaleInfoA
GetShortPathNameA
GetModuleHandleA
LCMapStringW
GetFileType
CloseHandle
FlushViewOfFile
EnterCriticalSection
GetStartupInfoA
SetFileAttributesW
GetProfileSectionW
CreateNamedPipeW
GetCommandLineW
GetDateFormatA
HeapValidate
DeleteCriticalSection
GlobalLock
HeapCreate
GetTickCount
HeapAlloc
GetProcAddress
VirtualQuery
GetLocaleInfoW
GlobalGetAtomNameA
VirtualFree
DeleteFileW
FindFirstFileW
DebugBreak
GetConsoleScreenBufferInfo
SetLastError
comctl32
ImageList_GetFlags
ImageList_DragLeave
ImageList_Duplicate
DrawStatusTextA
ImageList_GetImageRect
InitCommonControlsEx
ImageList_Draw
DestroyPropertySheetPage
ImageList_Read
ImageList_SetImageCount
ImageList_Destroy
CreatePropertySheetPage
ImageList_GetIcon
ImageList_ReplaceIcon
CreatePropertySheetPageA
ImageList_GetBkColor
wininet
InternetConfirmZoneCrossingA
UnlockUrlCacheEntryFileA
InternetOpenUrlA
DeleteUrlCacheContainerA
InternetAlgIdToStringA
InternetQueryOptionA
GetUrlCacheGroupAttributeA
CreateUrlCacheEntryA
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ