Static task
static1
Behavioral task
behavioral1
Sample
3f3bbaedc57eb623a589c5b99d1c9896_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f3bbaedc57eb623a589c5b99d1c9896_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f3bbaedc57eb623a589c5b99d1c9896_JaffaCakes118
-
Size
588KB
-
MD5
3f3bbaedc57eb623a589c5b99d1c9896
-
SHA1
e9798694cea39485098cce0ec3146c8798410405
-
SHA256
ea9bb9b23df347baccf40b7f8187f9bd367e2d3cd8687b389949a88be98ee99e
-
SHA512
203fda6455a408d464810e99c3457b4386790e6d372a913f754e4e8fb20166e87184f33ce3e4285f2b5c7ad98f14593b47f82fa02c589f3df241724181b2daa9
-
SSDEEP
12288:ZzqNz2HEniDCGoTvBHmdkwsvsoMfPGZSdzrT7Nk:ZzqNz2HEiDCT5HmyJJMSSFB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f3bbaedc57eb623a589c5b99d1c9896_JaffaCakes118
Files
-
3f3bbaedc57eb623a589c5b99d1c9896_JaffaCakes118.exe windows:4 windows x86 arch:x86
76bf59f4c0293af203f5ffa6919422df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
DeleteDC
EnumMetaFile
SetMapperFlags
CopyMetaFileA
comctl32
ImageList_Replace
InitCommonControlsEx
ImageList_AddIcon
user32
ToAsciiEx
SetScrollPos
EndPaint
RegisterClassA
ChangeMenuA
SetTimer
FlashWindowEx
CreateDialogIndirectParamA
RegisterClassExA
ChangeDisplaySettingsA
ClipCursor
DdeFreeDataHandle
AdjustWindowRectEx
GetWindowRect
CharUpperA
SetWindowPlacement
GetAsyncKeyState
GetWindowLongA
ChangeMenuW
OemToCharBuffW
LoadCursorFromFileA
SetClassLongW
FreeDDElParam
EnumThreadWindows
GetKeyboardLayout
CharPrevA
CharLowerBuffA
EnumDisplayDevicesA
AttachThreadInput
IsDialogMessage
DrawTextExW
shell32
InternalExtractIconListA
DragQueryFileAorW
SHLoadInProc
RealShellExecuteExW
advapi32
CryptCreateHash
CryptExportKey
RegDeleteKeyA
AbortSystemShutdownW
RegCreateKeyA
RegRestoreKeyW
CryptGenKey
LookupPrivilegeDisplayNameA
RegCreateKeyExA
RevertToSelf
RegSetValueA
AbortSystemShutdownA
kernel32
FreeLibrary
GetConsoleOutputCP
IsValidLocale
InterlockedExchange
CreateFileA
TlsGetValue
OpenMutexA
ExitProcess
CloseHandle
GetACP
RtlUnwind
VirtualFree
GetLastError
VirtualQuery
GetVersion
GetEnvironmentStringsW
UnhandledExceptionFilter
GetEnvironmentStrings
HeapAlloc
FindAtomW
InitializeCriticalSection
GetVersionExA
WriteConsoleW
GetModuleFileNameA
Sleep
IsValidCodePage
LCMapStringA
GetLocaleInfoA
SetLastError
FreeEnvironmentStringsA
RtlZeroMemory
WriteConsoleA
LeaveCriticalSection
GetCurrentThreadId
GetLocaleInfoW
GetTimeFormatA
FreeEnvironmentStringsW
GetTickCount
SetStdHandle
GetCommandLineA
IsBadWritePtr
ReadFile
CreateMutexA
GetUserDefaultLCID
InterlockedDecrement
MultiByteToWideChar
GetOEMCP
WriteConsoleInputW
SetHandleCount
GetComputerNameA
TerminateProcess
GetDateFormatA
HeapCreate
GlobalGetAtomNameW
GetStringTypeW
InterlockedIncrement
GetTimeZoneInformation
HeapDestroy
HeapLock
GlobalCompact
RemoveDirectoryA
SetFilePointer
SetVolumeLabelW
GetSystemTimeAsFileTime
GetConsoleMode
GetModuleHandleA
OpenWaitableTimerA
HeapFree
TlsSetValue
CompareStringW
GetCurrentThread
GetStringTypeA
QueryPerformanceCounter
VirtualAlloc
EnumSystemLocalesA
HeapReAlloc
FlushFileBuffers
GetCPInfo
GetProcAddress
GetCurrentProcessId
LoadLibraryA
HeapSize
GetFileType
GetStdHandle
SetUnhandledExceptionFilter
GetStartupInfoA
SetEnvironmentVariableA
WriteFile
GetConsoleCursorInfo
WriteConsoleOutputCharacterA
DeleteCriticalSection
CompareStringA
ReadConsoleOutputAttribute
DeleteFileW
GetCurrentProcess
LCMapStringW
TlsAlloc
EnterCriticalSection
SetConsoleCtrlHandler
TlsFree
GetProcessHeap
CreateFileMappingA
IsDebuggerPresent
GetConsoleCP
WideCharToMultiByte
Sections
.text Size: 172KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ