Static task
static1
Behavioral task
behavioral1
Sample
3f60bc5833bfac344ee64b19a2655966_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f60bc5833bfac344ee64b19a2655966_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
3f60bc5833bfac344ee64b19a2655966_JaffaCakes118
-
Size
324KB
-
MD5
3f60bc5833bfac344ee64b19a2655966
-
SHA1
7c9f62ba948ce79b1095d49f70fc90c2be2d3cc3
-
SHA256
beec71e710468a28251fd479459515f9190052be4311c2ac9ccd3f2283de0844
-
SHA512
b04d2f9512883a507ef85517bb38019a83388f844e54475c0206672d81e34203d9f63aa1c8a874f0de74e5e6dede62bd44177d63112a167cf5601453c793c8fb
-
SSDEEP
6144:oYPL2MRtAKZucnTGPwS1qP7jXSGWxGafMQRV55viVGlbp4GiLCMpzuH:Z2MRt9ZZTGoS1qnSRxGgviibr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f60bc5833bfac344ee64b19a2655966_JaffaCakes118
Files
-
3f60bc5833bfac344ee64b19a2655966_JaffaCakes118.exe windows:4 windows x86 arch:x86
44afca653ebe3fbc0b9618e0afbfba3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleW
GetOpenFileNameA
wininet
InternetFindNextFileW
HttpCheckDavCompliance
InternetSetCookieA
GopherFindFirstFileA
InternetAutodialHangup
SetUrlCacheGroupAttributeA
InternetDialA
InternetSecurityProtocolToStringA
InternetLockRequestFile
advapi32
RegEnumKeyExW
CryptContextAddRef
RegQueryMultipleValuesA
RegQueryValueExW
RegEnumValueA
RegSetValueExA
CryptGetUserKey
RegSetValueA
InitiateSystemShutdownA
user32
ValidateRect
CreateDesktopW
RedrawWindow
DestroyWindow
ShowWindow
DeleteMenu
MessageBoxW
wsprintfW
GetDesktopWindow
CharPrevA
GetLastActivePopup
SetScrollPos
CallMsgFilterA
CreateWindowExA
MessageBoxExW
DefWindowProcA
SendIMEMessageExA
LockWindowUpdate
DefMDIChildProcW
InvalidateRgn
AdjustWindowRectEx
RegisterHotKey
SetWindowLongW
GetProcessDefaultLayout
PostThreadMessageA
IsMenu
GetClassNameW
RegisterClassExA
SetClassLongW
ValidateRgn
RegisterClassA
CharLowerBuffW
GetParent
GetOpenClipboardWindow
EnumClipboardFormats
comctl32
ImageList_DragMove
CreateUpDownControl
ImageList_DrawIndirect
ImageList_AddIcon
ImageList_BeginDrag
ImageList_Destroy
ImageList_GetDragImage
ImageList_SetBkColor
ImageList_GetBkColor
CreatePropertySheetPageW
InitCommonControlsEx
ImageList_LoadImageW
InitMUILanguage
ImageList_Create
CreateMappedBitmap
ImageList_DragShowNolock
CreateStatusWindowA
CreatePropertySheetPageA
MakeDragList
ImageList_GetImageCount
_TrackMouseEvent
ImageList_GetIconSize
DrawInsert
kernel32
HeapDestroy
GetCurrentThreadId
GetSystemTimeAsFileTime
InterlockedExchange
LoadLibraryA
GetStringTypeA
RtlUnwind
WideCharToMultiByte
SetStdHandle
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStrings
IsValidCodePage
SetLastError
GetCPInfo
GetStartupInfoA
TlsGetValue
GetLocaleInfoW
FreeLibrary
MultiByteToWideChar
CreateFileA
TlsAlloc
GetConsoleCP
QueryPerformanceCounter
GetOEMCP
CompareStringW
HeapSize
GetLastError
SetHandleCount
GetStringTypeW
InterlockedIncrement
WriteConsoleOutputW
GetCommandLineA
GetCurrentProcess
IsDebuggerPresent
GetCurrentProcessId
GetModuleHandleA
UnlockFileEx
ReadFile
HeapCreate
GetConsoleMode
CreateMutexA
GetProcessHeap
GetConsoleOutputCP
TlsSetValue
CloseHandle
GetEnvironmentStringsW
UnhandledExceptionFilter
GetVersion
TlsFree
InterlockedDecrement
TerminateProcess
GetUserDefaultLCID
HeapReAlloc
DebugActiveProcess
SetFilePointer
DeleteCriticalSection
WriteFile
EnterCriticalSection
GetLocalTime
GetStdHandle
SetEnvironmentVariableA
IsValidLocale
HeapAlloc
LeaveCriticalSection
InitializeCriticalSection
GetLocaleInfoA
GetTimeZoneInformation
SetConsoleOutputCP
OpenMutexA
ExitProcess
GetModuleFileNameA
GetVersionExA
LCMapStringW
GetTimeFormatA
WriteConsoleA
CompareStringA
LCMapStringA
GetProcAddress
FlushFileBuffers
VirtualFree
GetPrivateProfileStructW
SetUnhandledExceptionFilter
GetACP
Sleep
HeapFree
WriteConsoleW
GetTickCount
GetDateFormatA
GetCurrentThread
FreeEnvironmentStringsA
GetFileType
EnumSystemLocalesA
VirtualAlloc
VirtualQuery
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ