Static task
static1
Behavioral task
behavioral1
Sample
416ff5fdbbdfc66070f78241edcb53e2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
416ff5fdbbdfc66070f78241edcb53e2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
416ff5fdbbdfc66070f78241edcb53e2_JaffaCakes118
-
Size
413KB
-
MD5
416ff5fdbbdfc66070f78241edcb53e2
-
SHA1
1454b1089111bda98fcd9f37cca885f7ec355ca1
-
SHA256
6a2bc9a72eeef5bfd430bc33a335c98cf0e1244f576ed709c0a7d0bb5e1daea0
-
SHA512
48fbead450603d40539896c4c0eacf2a3137a979a95cd836ad60a784cf7bc5bebf586f2a9b30fd02579ee7eccf4fc6b57007362c8390c4119037c4de087fa81c
-
SSDEEP
12288:xKjyax0BMGt5aHW93ACMIocbdKnKjyx7ja:xcHW93ACjnd2bx7W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 416ff5fdbbdfc66070f78241edcb53e2_JaffaCakes118
Files
-
416ff5fdbbdfc66070f78241edcb53e2_JaffaCakes118.exe windows:4 windows x86 arch:x86
5ffc70c5995f7a905e76c20c59eec171
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
OpenProcess
GetWindowsDirectoryA
SetFileAttributesA
GetDriveTypeA
FindClose
lstrcatA
lstrlenA
lstrcpyA
FindNextFileA
CloseHandle
GetFileSize
CreateFileA
GetLogicalDrives
FreeLibrary
LoadLibraryA
GetProcAddress
GetVersionExA
Process32Next
Sleep
CreateToolhelp32Snapshot
GetSystemDirectoryA
GetLastError
CreateMutexA
CreateThread
GetTickCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WinExec
CopyFileA
GetTempPathA
GetTempFileNameA
FindFirstFileA
GetModuleHandleA
Process32First
GetModuleFileNameA
FlushFileBuffers
SetEndOfFile
SetStdHandle
GetEnvironmentStringsW
HeapAlloc
RtlUnwind
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
DeleteFileA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileAttributesA
user32
SendMessageA
MessageBoxA
FindWindowA
BlockInput
keybd_event
GetForegroundWindow
GetWindowThreadProcessId
GetWindowTextA
GetClassNameA
ShowWindow
SetWindowTextA
advapi32
RegQueryValueExA
GetUserNameA
RegCreateKeyA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyA
shell32
ShellExecuteA
winmm
mciSendStringA
Sections
.BJFnt Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE