Static task
static1
Behavioral task
behavioral1
Sample
3970ca3e4f45c6083b911861b0c16125_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3970ca3e4f45c6083b911861b0c16125_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3970ca3e4f45c6083b911861b0c16125_JaffaCakes118
-
Size
136KB
-
MD5
3970ca3e4f45c6083b911861b0c16125
-
SHA1
e31f69a82094de30ee192b2834b951c036015cf6
-
SHA256
498af2e956ed6b661a3581eda87b484ed4263863af4c11dc0b7088835972558b
-
SHA512
8aa9b512e384df9dfa239316a730b932cd8b27ae5be0f6dce6d72ffd2ffec5dd0c40b40f53432d02359a941d14f0cfd55c0019204452ee04d23b9506d568816d
-
SSDEEP
3072:0jE233WJVVpaDb9iiMZDX9+7ZysApDR1t8oQVrafcvo020wr:0jJIVUbyDt+7Zyrz1t8TUc2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3970ca3e4f45c6083b911861b0c16125_JaffaCakes118
Files
-
3970ca3e4f45c6083b911861b0c16125_JaffaCakes118.exe windows:4 windows x86 arch:x86
a5bdd0ef72c9b85810fd169107587be1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ProcessIdToSessionId
RequestDeviceWakeup
GetVolumePathNameA
GetConsoleCommandHistoryA
GetQueuedCompletionStatus
GetThreadTimes
CloseHandle
SetFilePointer
GetModuleFileNameA
ReadConsoleOutputCharacterA
GetFileAttributesExA
DeleteTimerQueue
lstrcpynA
OpenFileMappingA
CreateWaitableTimerA
FreeLibrary
GlobalUnWire
lstrcmpA
SetFileShortNameA
GetSystemPowerStatus
PostQueuedCompletionStatus
WideCharToMultiByte
CloseHandle
VirtualAllocEx
OpenFile
GetModuleHandleA
WriteConsoleOutputA
VirtualProtectEx
GetProcAddress
SetInformationJobObject
OpenProcess
GetFileSizeEx
ExpandEnvironmentStringsA
WriteProfileSectionA
SetLastConsoleEventActive
GetDefaultCommConfigA
GetCurrentProcess
GetShortPathNameA
HeapSize
WriteConsoleOutputAttribute
SetHandleInformation
SetLastError
OpenMutexA
GetProcessTimes
GetComputerNameExA
HeapQueryInformation
WriteConsoleInputA
lstrcmp
VirtualQuery
SetHandleCount
GetProcessVersion
QueueUserWorkItem
EndUpdateResourceA
CreateEventA
CopyFileExA
GetConsoleWindow
GetCompressedFileSizeA
EnumSystemLocalesA
CreateDirectoryA
SetWaitableTimer
GetNumberOfConsoleInputEvents
FileTimeToLocalFileTime
PrepareTape
GlobalFindAtomA
GetDiskFreeSpaceExA
FindResourceExW
EnumSystemLanguageGroupsA
SetLocaleInfoA
WriteFileEx
IsBadStringPtrA
PeekConsoleInputA
GetStdHandle
GetCommTimeouts
GetThreadPriorityBoost
WriteConsoleOutputCharacterA
MoveFileExA
SetFileAttributesA
GetCurrentThreadId
GetDllDirectoryA
GlobalHandle
FlushConsoleInputBuffer
CreateTimerQueueTimer
RemoveDirectoryA
FindFirstFileExA
GetLogicalDriveStringsA
winmm
timeGetSystemTime
user32
GetMenuItemInfoA
ClipCursor
GetCapture
GetUpdateRgn
CharUpperBuffA
RemovePropA
CharUpperBuffA
CreateIcon
GetDoubleClickTime
GetIconInfo
GetWinStationInfo
GetUserObjectInformationA
GetRegisteredRawInputDevices
BeginPaint
GetMenu
ShowStartGlass
FlashWindow
CreateWindowStationA
GetUserObjectInformationA
IsClipboardFormatAvailable
SetCaretPos
SendNotifyMessageA
DeviceEventWorker
CreateIcon
ChangeDisplaySettingsExA
GetNextDlgGroupItem
InsertMenuItemA
RegisterClassExW
GetMouseMovePointsEx
MessageBoxTimeoutW
BuildReasonArray
EndDialog
SetMessageExtraInfo
SetLastErrorEx
PostMessageA
RegisterLogonProcess
GetClassNameA
BringWindowToTop
SendDlgItemMessageA
MapVirtualKeyA
GetGUIThreadInfo
CharLowerBuffA
GetKeyState
GrayStringA
FlashWindowEx
SetProcessDefaultLayout
AnimateWindow
GetClientRect
GetMouseMovePointsEx
GetTitleBarInfo
CallMsgFilterA
CheckDlgButton
GetClassLongA
CreateDialogIndirectParamA
GetKeyboardLayoutNameA
GetUserObjectInformationA
EditWndProc
SetDeskWallpaper
CreateMDIWindowA
DestroyIcon
AppendMenuA
BeginDeferWindowPos
BroadcastSystemMessageA
CopyAcceleratorTableA
GetClassNameA
DefDlgProcA
IsChild
RegisterTasklist
GetNextDlgGroupItem
GetWindowTextA
GetClipboardViewer
GetReasonTitleFromReasonCode
GetMessageTime
BroadcastSystemMessageExW
ShowWindowAsync
CreateMDIWindowA
GetMessageTime
ChangeClipboardChain
MapWindowPoints
InvalidateRgn
ExcludeUpdateRgn
SetShellWindow
EnumWindows
CheckMenuRadioItem
PrintWindow
LoadLocalFonts
DlgDirSelectComboBoxExA
CharToOemBuffA
Sections
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itext Size: 120KB - Virtual size: 391KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ