Static task
static1
Behavioral task
behavioral1
Sample
42e6dfd9e5b86e0acd4e171ba68ed97e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
42e6dfd9e5b86e0acd4e171ba68ed97e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
42e6dfd9e5b86e0acd4e171ba68ed97e_JaffaCakes118
-
Size
128KB
-
MD5
42e6dfd9e5b86e0acd4e171ba68ed97e
-
SHA1
481883fba2668d7afc201bc279bda99d7aa8ef06
-
SHA256
932271c1abcc6267922577bcc598fbbf037473a9ef560c58082131820b0a6a88
-
SHA512
0712ac4c260e85a27f1695df93d38043a15d04f112a5eab309db3f9fd0d95972189a101095f4e89998b86a146d12043e5d8104a7d4c73c2cd0e0fa5a7e66f035
-
SSDEEP
1536:wMJB52+MokoCWwniPLl6Bh6ZyySRi2OPhHRUtr3CLZxmZ3uENF3kUTx:N5kePIVySihHGtr3mPaugF3rTx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e6dfd9e5b86e0acd4e171ba68ed97e_JaffaCakes118
Files
-
42e6dfd9e5b86e0acd4e171ba68ed97e_JaffaCakes118.exe windows:4 windows x86 arch:x86
daca055f3c647183f6d0b7627a1288fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord8
kernel32
LoadLibraryA
GetProcAddress
FreeLibrary
RemoveDirectoryA
GetFileAttributesA
SetFileAttributesA
lstrcmpiA
lstrlenA
MoveFileExA
GetShortPathNameA
GetWindowsDirectoryA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
GetCurrentProcess
GetLastError
GetModuleFileNameA
GetTickCount
IsDBCSLeadByte
OpenEventA
SetEvent
CloseHandle
OpenProcess
WaitForSingleObject
Sleep
VirtualProtect
WinExec
GlobalSize
CreateFileA
GlobalFree
WriteFile
GetCurrentProcessId
CopyFileA
CreateEventA
CreateProcessA
GetVersionExA
GetFileSize
GlobalAlloc
SetFilePointer
ReadFile
LocalAlloc
LocalFree
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
GetSystemTimeAsFileTime
lstrcpyA
DeleteFileA
GetTempFileNameA
GetTempPathA
FindClose
FindNextFileA
lstrcmpA
FindFirstFileA
lstrcatA
lstrcpynA
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
HeapFree
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
MultiByteToWideChar
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
user32
IsDialogMessageA
DestroyWindow
SetWindowPos
GetWindowLongA
AdjustWindowRect
MapDialogRect
SetRect
IsDlgButtonChecked
GetClientRect
PostQuitMessage
LoadStringA
DispatchMessageA
TranslateMessage
PeekMessageA
GetMessageA
SetDlgItemTextA
CharPrevA
ShowWindow
SendDlgItemMessageA
CreateDialogParamA
MessageBoxA
ExitWindowsEx
wsprintfA
GetDlgItem
SetWindowTextA
comdlg32
GetFileTitleA
advapi32
RegCloseKey
RegEnumKeyExA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyExA
shell32
SHChangeNotify
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Sections
.text Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ