Static task
static1
Behavioral task
behavioral1
Sample
396bd078b835c928e8d6ca076ce84fde_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
396bd078b835c928e8d6ca076ce84fde_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
396bd078b835c928e8d6ca076ce84fde_JaffaCakes118
-
Size
2.7MB
-
MD5
396bd078b835c928e8d6ca076ce84fde
-
SHA1
d6c1f4e3bb47ade85c4dc304e84ac47429c7eed2
-
SHA256
e072b5da6f1844de804b1f3b118056619f7ec2b624e684697bf95a3cb6189200
-
SHA512
47af9d285b4a836ef10fc9d493ba8cb8157e749639cedb43c9397de39dd329c76ccebfaa7105a69d0d6c94e263ee0c85c05c012f002d51a7332fc313190afea9
-
SSDEEP
24576:BltHRvLb9qjIuyLhZG7o385f7uYnZrzkEQzMCl0cKQiXwjMn1HQoJ4Cfx:jDhqIGX5f78QkjwJ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 396bd078b835c928e8d6ca076ce84fde_JaffaCakes118
Files
-
396bd078b835c928e8d6ca076ce84fde_JaffaCakes118.exe windows:4 windows x86 arch:x86
881b6503cc1afb4d4e4248666f6854b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
kernel32
FindFirstFileA
FindClose
WinExec
OutputDebugStringA
VirtualFree
GetTempPathA
GetTempFileNameA
UnmapViewOfFile
CreateFileA
CreateFileMappingA
MapViewOfFile
CompareStringA
IsDBCSLeadByte
GetVersionExA
FileTimeToSystemTime
GetProcAddress
_llseek
_lread
GlobalAlloc
GetModuleHandleA
FindResourceA
LoadResource
LockResource
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalFree
_hread
_lclose
GetLastError
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetVolumeInformationA
MulDiv
SetEnvironmentVariableA
WriteFile
SetFilePointer
GetFileType
ReadFile
FileTimeToLocalFileTime
FindNextFileA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
DeleteFileA
HeapFree
HeapAlloc
RtlUnwind
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
CompareStringW
WideCharToMultiByte
GetFullPathNameA
ExitProcess
TerminateProcess
GetCurrentProcess
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualAlloc
FlushFileBuffers
SetHandleCount
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
HeapSize
ReleaseMutex
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
SetStdHandle
SetEndOfFile
CreateMutexA
LCMapStringA
LCMapStringW
RaiseException
HeapReAlloc
GetCurrentDirectoryA
OpenFile
GlobalMemoryStatus
LoadLibraryA
FreeLibrary
CloseHandle
GetDriveTypeA
user32
GetMessageA
TranslateMessage
FindWindowA
DestroyWindow
InvalidateRect
PeekMessageA
DispatchMessageA
CharUpperA
RegisterClassA
LoadIconA
UpdateWindow
SetWindowPos
GetClientRect
GetWindowRect
CreateWindowExA
GetSystemMetrics
GetWindowThreadProcessId
GetKeyState
ReleaseDC
GetDC
BringWindowToTop
GetLastActivePopup
LoadStringA
SetForegroundWindow
IsIconic
GetUpdateRect
ValidateRect
FillRect
ScreenToClient
GetCursorPos
SetClassLongA
SetCursor
GetWindowTextA
GetKeyboardState
GetAsyncKeyState
GetForegroundWindow
DrawTextA
IsClipboardFormatAvailable
SendMessageA
SystemParametersInfoA
ShowWindow
SetFocus
SetTimer
LoadCursorA
OpenClipboard
GetClipboardData
CloseClipboard
GetCaretBlinkTime
DrawTextExA
CallWindowProcA
MoveWindow
GetFocus
MessageBeep
GetWindowLongA
SetSysColors
GetSysColor
SetCursorPos
MessageBoxA
SetRect
ClientToScreen
WinHelpA
GetActiveWindow
PostMessageA
SetWindowLongA
GetCapture
ReleaseCapture
SetCapture
SetWindowTextA
KillTimer
PostQuitMessage
DefWindowProcA
gdi32
CreatePalette
GetPaletteEntries
GetDeviceCaps
GetTextMetricsA
SelectObject
CreateFontIndirectA
GetStockObject
RealizePalette
SelectPalette
DeleteDC
CreateICA
GetObjectA
DeleteObject
GetNearestPaletteIndex
SetPaletteEntries
ResizePalette
GetSystemPaletteEntries
CreateRectRgn
SelectClipRgn
TextOutA
SetTextColor
GetTextExtentPoint32A
SetBkMode
SetBkColor
LineTo
MoveToEx
CreatePen
advapi32
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
dplayx
ord1
ord4
ord2
dsound
DirectSoundCreate
ddraw
DirectDrawCreate
winmm
mixerGetLineControlsA
mixerGetControlDetailsA
mixerClose
mixerGetLineInfoA
timeKillEvent
timeEndPeriod
timeBeginPeriod
timeSetEvent
mixerSetControlDetails
mixerOpen
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioOpenA
mmioDescend
mmioRead
mmioAscend
mciSendCommandA
timeGetTime
mixerGetNumDevs
mciGetErrorStringA
mmioClose
mmioSeek
imm32
ImmReleaseContext
ImmNotifyIME
ImmGetContext
ImmAssociateContext
ImmSetOpenStatus
msvfw32
ICInfo
MCIWndCreateA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
wsock32
WSAStartup
gethostbyname
gethostname
WSACleanup
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
THIS_COD Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
THIS_DAT Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Inf32Dat Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.XTHIS_C Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE