Static task
static1
Behavioral task
behavioral1
Sample
3f23a89ca3904a03aa6df35fdaefecc2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f23a89ca3904a03aa6df35fdaefecc2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f23a89ca3904a03aa6df35fdaefecc2_JaffaCakes118
-
Size
332KB
-
MD5
3f23a89ca3904a03aa6df35fdaefecc2
-
SHA1
6abac759074d4bebc7ffe024a8b473970967b7d0
-
SHA256
0e0fc9e688b803c875bddc3a3d853bc1810093df9de63632524c40c5f0e5b083
-
SHA512
c21a3f68e16083338f200677b5f8f06558a50ae67a1cc8301fca437f33fe5423d49c54190f57aa28faab65ca96d88e27cbee0efa41174c3f032dafcc0bbc40b0
-
SSDEEP
6144:SNUDtL5TcY/lIACmvxgCfTR5OXgvnrzApchg019s5fZSGLhoD5FCvVf57oh:GUxL5TcelRCmvxg6TjzzmigoAxljR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f23a89ca3904a03aa6df35fdaefecc2_JaffaCakes118
Files
-
3f23a89ca3904a03aa6df35fdaefecc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe4a01265b9a712e0572aba886a1ccfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
PolyBezierTo
CreateFontIndirectW
FillPath
DeviceCapabilitiesExA
CreateEllipticRgn
SetViewportExtEx
ChoosePixelFormat
CloseFigure
EnumObjects
GetMapMode
GetMiterLimit
PtInRegion
InvertRgn
AddFontResourceW
user32
GetMenuStringA
InsertMenuItemW
DialogBoxIndirectParamA
InsertMenuW
GetClassWord
GetUserObjectInformationW
IsChild
LookupIconIdFromDirectory
DefFrameProcW
AdjustWindowRect
LoadAcceleratorsA
SetWindowContextHelpId
GetMenuItemID
DrawTextExA
RegisterClassA
RegisterClassExA
MessageBoxW
IsClipboardFormatAvailable
ShowWindow
BringWindowToTop
DestroyWindow
CreateWindowExA
SendNotifyMessageW
DefWindowProcW
GetQueueStatus
SetMessageExtraInfo
EnumPropsA
CheckDlgButton
advapi32
RegCreateKeyW
RegQueryValueExA
RegQueryInfoKeyW
StartServiceW
RegOpenKeyW
CryptSetProviderExA
LookupSecurityDescriptorPartsA
CryptDuplicateKey
RegSetValueExW
RegLoadKeyA
CryptSetProviderW
LookupPrivilegeDisplayNameA
RegRestoreKeyW
RegCreateKeyA
RegReplaceKeyW
wininet
UnlockUrlCacheEntryStream
InternetShowSecurityInfoByURL
LoadUrlCacheContent
FtpGetCurrentDirectoryA
kernel32
VirtualQuery
GetConsoleMode
OpenMutexA
TlsFree
GetCommandLineA
ReadFile
GetOEMCP
CompareStringW
UnhandledExceptionFilter
GetCurrentProcess
WriteConsoleA
HeapCreate
TlsSetValue
GetProcAddress
WritePrivateProfileStructW
CreateFileA
InitializeCriticalSection
FlushFileBuffers
SetFilePointer
EnumSystemLocalesA
HeapFree
GetConsoleCP
lstrcmpiW
WriteConsoleW
GetUserDefaultLCID
GetVersionExA
GetEnvironmentStringsW
GetStdHandle
LCMapStringW
WriteFile
InterlockedExchange
FreeEnvironmentStringsW
EnumCalendarInfoW
GetDateFormatA
Sleep
DeleteAtom
TlsGetValue
SetHandleCount
LoadLibraryA
GlobalAddAtomW
GetTempFileNameA
GetSystemTimeAsFileTime
EnumResourceNamesW
GetEnvironmentStrings
IsValidLocale
DeleteCriticalSection
SetThreadContext
CompareStringA
HeapReAlloc
GetStringTypeA
LeaveCriticalSection
GetLastError
QueryPerformanceCounter
GetLocaleInfoA
WideCharToMultiByte
GetTimeFormatA
GetStartupInfoA
SetStdHandle
HeapAlloc
FreeEnvironmentStringsA
InterlockedIncrement
HeapSize
GetSystemTimeAdjustment
MultiByteToWideChar
GetTimeZoneInformation
GetCurrentProcessId
VirtualAlloc
GetStringTypeW
ExitProcess
TerminateProcess
CloseHandle
GetTickCount
GetConsoleOutputCP
VirtualFree
SetEnvironmentVariableA
RtlUnwind
SystemTimeToFileTime
SetSystemTime
HeapDestroy
GetLocalTime
GetCurrentThread
IsValidCodePage
CreateMutexA
IsDebuggerPresent
EnterCriticalSection
GetCPInfo
GetModuleHandleA
FreeLibrary
GetLocaleInfoW
GetFileType
GetModuleFileNameA
TlsAlloc
GetCurrentThreadId
InterlockedDecrement
GetProcessHeap
SetUnhandledExceptionFilter
SetLastError
LCMapStringA
SetConsoleCtrlHandler
GetACP
comctl32
DestroyPropertySheetPage
ImageList_AddIcon
ImageList_SetFilter
ImageList_ReplaceIcon
ImageList_Add
ImageList_Destroy
ImageList_DragEnter
CreateUpDownControl
ImageList_Read
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_SetDragCursorImage
ImageList_GetDragImage
ImageList_GetImageCount
ImageList_Copy
ImageList_SetBkColor
ImageList_LoadImageA
InitMUILanguage
ImageList_Create
ImageList_EndDrag
CreateToolbar
GetEffectiveClientRect
InitCommonControlsEx
ImageList_DragShowNolock
Sections
.text Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ