Static task
static1
Behavioral task
behavioral1
Sample
417744dd26d9374f5a8c8f1be9456f5c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
417744dd26d9374f5a8c8f1be9456f5c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
417744dd26d9374f5a8c8f1be9456f5c_JaffaCakes118
-
Size
616KB
-
MD5
417744dd26d9374f5a8c8f1be9456f5c
-
SHA1
188949487b9f3993afdcd930590fff280b033123
-
SHA256
f1eca86f5fde3cd4b199a0f795da5867891a37e0040d3080404d132806ae42fa
-
SHA512
e6f463f4134f4f8116a01e5604aa7ada280c8526f5cf161f2cf91f0b17aa3de55b1f5876c1c511e049552f5f075c10bbec8469892a31f3ab7457309f383f2adb
-
SSDEEP
12288:mYC1EGFL2kc07eQE+/6sYLUQ2EuF02wa/13oI3:J6vSkc0CZ+pXEe0/a/V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 417744dd26d9374f5a8c8f1be9456f5c_JaffaCakes118
Files
-
417744dd26d9374f5a8c8f1be9456f5c_JaffaCakes118.exe windows:4 windows x86 arch:x86
15d2226909269ade3c597e5b6cbcc8a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_DragLeave
ImageList_DrawIndirect
CreateToolbar
ImageList_GetFlags
ImageList_SetBkColor
DrawStatusTextW
CreatePropertySheetPage
ImageList_LoadImageW
ImageList_Write
CreateStatusWindowA
ImageList_SetIconSize
ImageList_Remove
InitCommonControlsEx
CreateToolbarEx
InitMUILanguage
ImageList_BeginDrag
ImageList_Copy
ImageList_EndDrag
ImageList_SetImageCount
kernel32
UnhandledExceptionFilter
GetStdHandle
CompareStringW
DeleteFiber
FormatMessageA
TlsFree
GetModuleFileNameW
GetDateFormatA
VirtualQuery
MoveFileExA
QueryPerformanceCounter
GetProcAddress
RtlUnwind
GetNumberFormatA
HeapAlloc
EnumSystemLocalesA
GetOEMCP
LCMapStringA
InitializeCriticalSection
LeaveCriticalSection
GetStringTypeA
GetCommandLineA
GetEnvironmentStrings
EnumResourceTypesW
LockFileEx
FreeEnvironmentStringsW
SetEvent
GetStringTypeW
LCMapStringW
GetNamedPipeInfo
SetHandleCount
SetThreadAffinityMask
IsBadReadPtr
GetLocaleInfoA
GetSystemTimeAsFileTime
GlobalFree
SetFilePointer
SetStdHandle
GetConsoleCP
GetSystemDefaultLangID
VirtualFree
CreateEventA
GetProcessHeaps
SetLastError
CreateSemaphoreA
CreateMutexA
FlushFileBuffers
OpenMutexA
FlushConsoleInputBuffer
GetVersionExA
GetStartupInfoA
SetPriorityClass
HeapFree
FreeEnvironmentStringsA
VirtualProtect
GetCurrentThread
HeapReAlloc
CompareStringA
GetCurrentProcess
GetCommandLineW
SetConsoleScreenBufferSize
TlsGetValue
GetFileType
HeapCreate
GetModuleFileNameA
IsBadWritePtr
GetCurrentProcessId
InterlockedExchange
WriteFile
GetPrivateProfileSectionA
GetCPInfo
ExitProcess
IsValidCodePage
SetTimeZoneInformation
ReadFile
SetComputerNameW
TlsAlloc
IsValidLocale
WideCharToMultiByte
HeapSize
GetTimeFormatA
GetCurrentThreadId
EnterCriticalSection
GetLocaleInfoW
SetEnvironmentVariableA
TlsSetValue
GetACP
OpenFileMappingA
VirtualAlloc
GetLastError
GetModuleHandleA
GetEnvironmentStringsW
lstrcmpiW
GetTickCount
SetVolumeLabelW
CloseHandle
GetUserDefaultLCID
LocalFileTimeToFileTime
DeleteCriticalSection
GetSystemInfo
LoadLibraryA
ReadConsoleOutputW
MultiByteToWideChar
GetStartupInfoW
WriteProfileStringW
FillConsoleOutputCharacterA
FreeLibraryAndExitThread
GetTimeZoneInformation
TerminateProcess
HeapDestroy
user32
GetMenuItemInfoW
EnableScrollBar
SetScrollPos
DefWindowProcA
LoadBitmapW
CreateDialogParamA
CreateIconFromResource
MsgWaitForMultipleObjectsEx
DestroyWindow
MessageBoxIndirectA
RegisterClassA
GetTabbedTextExtentW
CreateAcceleratorTableA
SetMessageQueue
OemToCharBuffW
DestroyCaret
RegisterClassExA
CopyAcceleratorTableW
CreateWindowExA
SystemParametersInfoW
DdeGetLastError
SetFocus
SetWindowRgn
CopyIcon
DrawStateW
DrawTextA
MessageBoxA
LoadCursorA
ShowWindow
Sections
.text Size: 220KB - Virtual size: 218KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ