Static task
static1
Behavioral task
behavioral1
Sample
417bede09d4f1989c7091bead047e941_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
417bede09d4f1989c7091bead047e941_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
417bede09d4f1989c7091bead047e941_JaffaCakes118
-
Size
540KB
-
MD5
417bede09d4f1989c7091bead047e941
-
SHA1
ef6a84b4e8d8bd53fa6792558e3ef549f3682514
-
SHA256
a8b5790ecdd397365760fdeaaf1861cadf2c7d5c0b6b9f7c46fc730be3d05179
-
SHA512
90399e71c8ebfa386dd2708f65590166752f289fbb9ed2a9aba6b664eadc2a46242ab2856c8039023b489fa9cf20eacfc3c6e06d8acf0f948a5af1f486971627
-
SSDEEP
12288:T/aefIXJbeF6E32qIoQRo2XJBhZqhOSasu13C4mVZMTjxk974MW:T/aaIXJbeF6EmjoQRoyJBhZqMSa13C4m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 417bede09d4f1989c7091bead047e941_JaffaCakes118
Files
-
417bede09d4f1989c7091bead047e941_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c2247a7858c7a46cf98622fde022c4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
gdi32
EnumFontFamiliesExA
gdiPlaySpoolStream
CreateEllipticRgnIndirect
LPtoDP
CreateCompatibleBitmap
SetPixel
RealizePalette
GetWinMetaFileBits
AddFontResourceW
SetICMProfileA
PatBlt
SetColorSpace
GetICMProfileW
GetTextFaceW
SetGraphicsMode
GetTextExtentExPointW
TextOutW
GetNearestColor
GetKerningPairsA
TranslateCharsetInfo
GdiSetBatchLimit
ArcTo
StartDocA
GetMetaRgn
kernel32
ReadFile
VirtualAlloc
GetTempFileNameW
GetModuleHandleA
InterlockedExchange
GetProfileIntA
TlsSetValue
GetConsoleOutputCP
GetProcessHeap
IsDebuggerPresent
GetCurrentProcessId
InitializeCriticalSection
GetSystemTimeAsFileTime
GetUserDefaultLCID
SetFilePointer
GetEnvironmentStringsW
GetTickCount
GlobalFindAtomA
EnterCriticalSection
MultiByteToWideChar
TlsFree
HeapCreate
GetModuleFileNameA
WriteConsoleA
TlsGetValue
GetCurrencyFormatW
SetStdHandle
HeapReAlloc
CreateMutexW
GetModuleFileNameW
LCMapStringW
GetStringTypeA
OpenMutexA
GetCommandLineW
DeleteCriticalSection
SetHandleCount
GetPrivateProfileStructW
GetCurrentThread
GetEnvironmentStrings
CompareStringW
GetCPInfo
FreeEnvironmentStringsW
GetStdHandle
GetLocaleInfoW
GetStartupInfoW
GetCurrentProcess
Sleep
WriteFile
InterlockedIncrement
TlsAlloc
WriteConsoleW
SetEnvironmentVariableA
SetLastError
FillConsoleOutputCharacterA
GetOEMCP
GetDateFormatA
WideCharToMultiByte
VirtualFree
UnhandledExceptionFilter
LoadLibraryA
FlushFileBuffers
CompareStringA
LCMapStringA
IsValidCodePage
HeapSize
GetCalendarInfoA
GetTimeFormatA
IsValidLocale
GetTimeZoneInformation
CreateMutexA
ExitProcess
GetConsoleCP
GetLocaleInfoA
GetPrivateProfileSectionNamesW
QueryPerformanceCounter
LocalCompact
HeapDestroy
EnumSystemLocalesA
HeapAlloc
HeapFree
FreeLibrary
GetProcAddress
LeaveCriticalSection
GetLastError
VirtualQuery
GetCommandLineA
GetCurrentThreadId
SetUnhandledExceptionFilter
CreateFileA
TerminateProcess
GetNamedPipeHandleStateW
lstrcat
FreeEnvironmentStringsA
InterlockedDecrement
CloseHandle
GetACP
GetVersionExA
HeapValidate
SetConsoleCtrlHandler
DeleteFileA
GetStartupInfoA
GetConsoleMode
GetFileType
RtlUnwind
GetStringTypeW
user32
RegisterClassA
DeleteMenu
RegisterHotKey
RegisterClassExA
CountClipboardFormats
ScrollDC
CreateDesktopW
CreateWindowExW
GetScrollBarInfo
OemToCharBuffW
ValidateRgn
Sections
.text Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 317KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ