Static task
static1
Behavioral task
behavioral1
Sample
448bd9aa1ad97ef42f10c3bbff32282c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
448bd9aa1ad97ef42f10c3bbff32282c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
448bd9aa1ad97ef42f10c3bbff32282c_JaffaCakes118
-
Size
562KB
-
MD5
448bd9aa1ad97ef42f10c3bbff32282c
-
SHA1
91bdb25575285a803b1a66cb7ae8f6b0c23a5f2a
-
SHA256
0e665002bd05f13deb6f5801645b3d15a8df287baa7478a11281d5663e898843
-
SHA512
10b22bf9addc06d02500f5521e9bf59e06faec85891661ca6f254c4778510008652f4cbc284cabb0e759c886227657977760fee037600be5a4d9adfebd581879
-
SSDEEP
6144:Pg3noyTeXZzQspYrU93q00vq2HqO1ww0s1DLDiAfJqNIfnbGAunLQHT36caBZL6l:Pg3oKeXRV81us1DXiAflyxLQecafGiW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 448bd9aa1ad97ef42f10c3bbff32282c_JaffaCakes118
Files
-
448bd9aa1ad97ef42f10c3bbff32282c_JaffaCakes118.exe windows:4 windows x86 arch:x86
ef18595f809b94901b6752e2e73d0922
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetAutodialHangup
GopherGetAttributeW
InternetReadFileExA
InternetSetCookieW
comdlg32
PrintDlgA
GetSaveFileNameA
ChooseFontW
ChooseFontA
user32
ShowCaret
UnhookWinEvent
DefWindowProcA
RegisterClassExA
EqualRect
OemToCharBuffW
IsCharUpperA
GetUpdateRgn
RegisterClassA
CallNextHookEx
MessageBoxA
ChangeDisplaySettingsExW
SubtractRect
SendNotifyMessageA
MonitorFromPoint
CreateMDIWindowA
CharToOemA
TabbedTextOutA
DestroyWindow
TabbedTextOutW
ShowWindow
GetQueueStatus
CreateWindowExA
EnumDisplaySettingsExW
DdeInitializeA
gdi32
CreatePolygonRgn
CloseMetaFile
EndDoc
CombineTransform
GetCharacterPlacementW
GetWinMetaFileBits
GetBitmapDimensionEx
GetNearestPaletteIndex
EnumFontFamiliesExA
GetEnhMetaFileBits
PolyPolyline
CopyEnhMetaFileW
MaskBlt
CreatePenIndirect
advapi32
ReportEventW
CryptImportKey
LogonUserA
CryptAcquireContextW
RegSetValueA
RegEnumValueW
CreateServiceA
CryptEnumProviderTypesW
RegQueryValueA
RegEnumKeyW
RegDeleteValueA
RegSetKeySecurity
RegQueryInfoKeyA
RegCloseKey
CryptSetHashParam
RegQueryValueW
CryptEnumProvidersA
comctl32
InitMUILanguage
ImageList_GetImageCount
DrawStatusText
ImageList_DrawEx
InitCommonControlsEx
CreatePropertySheetPageW
_TrackMouseEvent
ImageList_DragLeave
ImageList_GetFlags
DrawStatusTextA
ImageList_AddIcon
ImageList_Merge
CreateStatusWindow
kernel32
GetACP
LeaveCriticalSection
SetFilePointer
OpenMutexA
TlsAlloc
ExitProcess
GetLocaleInfoA
TlsFree
GetModuleFileNameA
HeapCreate
WriteFile
WriteConsoleA
HeapSize
GetCurrentProcessId
InterlockedIncrement
IsValidCodePage
FlushFileBuffers
TerminateThread
SetConsoleMode
FreeLibrary
FreeEnvironmentStringsA
VirtualAllocEx
GetProfileIntW
CreateFileA
GetOEMCP
GetLocaleInfoW
RtlUnwind
HeapReAlloc
SetUnhandledExceptionFilter
GetLastError
QueryPerformanceCounter
UnhandledExceptionFilter
CompareStringW
CreateRemoteThread
Sleep
FreeEnvironmentStringsW
GetModuleHandleW
HeapDestroy
CompareStringA
IsBadWritePtr
GetSystemInfo
GlobalFindAtomA
CreateMutexA
GetTickCount
SetStdHandle
InterlockedDecrement
SetEnvironmentVariableA
GetCurrentThread
VirtualAlloc
SetConsoleCtrlHandler
CreateMutexW
GetFileType
FormatMessageA
GetConsoleOutputCP
TlsSetValue
GetStartupInfoA
GetTimeFormatA
GetModuleHandleA
GetDateFormatA
GetStdHandle
EnterCriticalSection
VirtualFree
HeapFree
GetStringTypeW
GetProcAddress
TlsGetValue
MultiByteToWideChar
GetEnvironmentStringsW
SetPriorityClass
InitializeCriticalSectionAndSpinCount
GetConsoleCP
CloseHandle
TerminateProcess
IsValidLocale
lstrcpyA
VirtualQuery
WideCharToMultiByte
GetSystemTimeAsFileTime
GetEnvironmentStrings
GetDateFormatW
LockResource
GetCommandLineA
GetCurrentProcess
GetTimeZoneInformation
GetConsoleMode
GetUserDefaultLCID
IsBadReadPtr
WriteConsoleW
GetCurrentThreadId
GetCPInfo
LCMapStringW
LCMapStringA
GetStringTypeA
CreateEventW
ExpandEnvironmentStringsW
IsDebuggerPresent
EnumSystemLocalesA
InterlockedExchange
LoadLibraryA
ReadFile
SetHandleCount
SetLastError
GetPrivateProfileSectionNamesA
HeapAlloc
DeleteCriticalSection
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 203KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ