Static task
static1
Behavioral task
behavioral1
Sample
3890f2a3fa74d0879d282aa6d711019e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3890f2a3fa74d0879d282aa6d711019e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3890f2a3fa74d0879d282aa6d711019e_JaffaCakes118
-
Size
437KB
-
MD5
3890f2a3fa74d0879d282aa6d711019e
-
SHA1
a8e78484fdf80a32309f69422266dfef70c38e1e
-
SHA256
671abb7ad66481d0df2ecc1aded7c34cf4270df9f6350b4254b25ee656e1a856
-
SHA512
4f0c5d2adde912180ace6d6b813795111923bb5b60b66aa7766e244ae6616bcc500931e99187b4d0b4dd846aa117e6b4d00620aa98483822785ca0640a4db6dc
-
SSDEEP
12288:Su1leHL6Hj5K9u82tQDk55Hakx6D12l1pKd0eL:kAOu8nkzHakq21
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3890f2a3fa74d0879d282aa6d711019e_JaffaCakes118
Files
-
3890f2a3fa74d0879d282aa6d711019e_JaffaCakes118.exe windows:4 windows x86 arch:x86
32f401e453b26834b2512e87a49b9d28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DebugActiveProcess
GetEnvironmentStrings
WaitNamedPipeA
SetConsoleMode
FreeLibrary
GetFullPathNameA
HeapAlloc
SetConsoleCtrlHandler
InterlockedIncrement
GetTimeZoneInformation
IsValidLocale
TlsFree
CreateFileA
GetShortPathNameA
TlsAlloc
InterlockedDecrement
SetUnhandledExceptionFilter
GetCommandLineW
GetCurrentThread
ReadConsoleOutputW
HeapDestroy
GetProfileSectionA
GetDateFormatA
CompareStringA
GetConsoleCP
GetLastError
IsValidCodePage
GetCommandLineA
GetProcAddress
lstrcpyn
GetCPInfo
LeaveCriticalSection
GetOEMCP
GetThreadPriority
SetWaitableTimer
GetLocaleInfoA
VirtualQuery
GetTimeFormatA
LCMapStringW
GetVersionExA
WriteConsoleOutputCharacterW
GetModuleFileNameW
IsDebuggerPresent
FreeEnvironmentStringsW
HeapReAlloc
GetStringTypeW
ExitProcess
GetACP
TlsSetValue
VirtualAlloc
MultiByteToWideChar
QueryPerformanceCounter
GetCurrentProcess
GetStartupInfoW
GetModuleHandleA
EnterCriticalSection
GetProcessHeap
GetStartupInfoA
GetCurrentThreadId
HeapCreate
SetHandleCount
DeleteFileW
EnumSystemLocalesA
VirtualFree
Sleep
WriteFile
FileTimeToLocalFileTime
GetFileAttributesExW
GetTickCount
GetFileType
WideCharToMultiByte
DeleteCriticalSection
HeapSize
GetUserDefaultLCID
RtlUnwind
CompareStringW
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetStringTypeA
ReadFileEx
WritePrivateProfileStringW
FreeEnvironmentStringsA
SetLastError
GetEnvironmentStringsW
GetLocaleInfoW
HeapFree
TerminateProcess
LoadLibraryA
GetProcessHeaps
LCMapStringA
TlsGetValue
GetConsoleTitleA
GetModuleFileNameA
InitializeCriticalSection
EnumTimeFormatsA
SetEnvironmentVariableA
GetThreadLocale
InterlockedExchange
GetCurrentProcessId
GetNamedPipeInfo
GetStdHandle
user32
InsertMenuW
GetScrollInfo
EnumPropsExW
FrameRect
GetListBoxInfo
DeleteMenu
VkKeyScanExA
LoadImageA
GetGUIThreadInfo
IntersectRect
CharNextExA
CharLowerBuffW
DdePostAdvise
EnableMenuItem
SetCursor
GetMessageTime
SetRectEmpty
CloseWindowStation
EnumClipboardFormats
gdi32
GetCharWidthW
GetTextExtentPoint32W
CreateCompatibleBitmap
SetICMProfileA
GetMetaFileA
GetCharABCWidthsA
GetBrushOrgEx
GetTextExtentExPointW
GetGlyphOutline
CreateRectRgn
CreatePatternBrush
GdiFlush
OffsetClipRgn
GetGlyphOutlineW
GetPixel
EnumICMProfilesW
wininet
FindFirstUrlCacheContainerW
InternetShowSecurityInfoByURLW
InternetGetLastResponseInfoA
InternetCanonicalizeUrlA
RunOnceUrlCache
FtpGetFileSize
HttpQueryInfoW
UnlockUrlCacheEntryFileA
IsUrlCacheEntryExpiredW
InternetLockRequestFile
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ