Static task
static1
Behavioral task
behavioral1
Sample
463690821580309ecb3effccd08590b9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
463690821580309ecb3effccd08590b9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
463690821580309ecb3effccd08590b9_JaffaCakes118
-
Size
84KB
-
MD5
463690821580309ecb3effccd08590b9
-
SHA1
949d16e97e0c5ffcf10de099539954e4b5cae55e
-
SHA256
43c975823f42e057fcf5d815061cd17645083752321f7425c51d2e5727fcfffa
-
SHA512
3290402fe0bd39eec7a07ef4045af99a535659d2bd752fa3ec1c49341d0d30739fce9837a8299c9bd9024e230f8bd6e1a857480f705d44577ca7661165677101
-
SSDEEP
1536:+txfQtbuemk1SadvADm6Rye9yyY1qkHCLs4mCUg0ujvDbbe:+txfQtfmk1R9A9yexYn0s49Uzeb6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 463690821580309ecb3effccd08590b9_JaffaCakes118
Files
-
463690821580309ecb3effccd08590b9_JaffaCakes118.exe windows:5 windows x86 arch:x86
39c5118305efe7cdc41159a204e61e95
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GetSystemTime
VirtualAlloc
VirtualProtect
VirtualFree
LeaveCriticalSection
EnterCriticalSection
lstrlenW
SizeofResource
FindResourceW
LockResource
LoadResource
GlobalAlloc
GlobalLock
InterlockedExchange
GetVersionExW
IsWow64Process
OpenProcess
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetTickCount
CreateMutexA
GetStringTypeW
LCMapStringW
WideCharToMultiByte
HeapReAlloc
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
SetThreadPriority
SetPriorityClass
GetShortPathNameA
GetModuleFileNameA
LoadLibraryA
WriteFile
OpenFile
CreateFileW
MultiByteToWideChar
GetModuleFileNameW
CloseHandle
GetCurrentProcess
TerminateProcess
DeleteFileW
LoadLibraryW
GetModuleHandleW
GetLastError
ReleaseMutex
GetProcAddress
ReadFile
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetStdHandle
ExitProcess
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapAlloc
GetSystemInfo
VirtualQuery
HeapFree
RaiseException
user32
SetWindowTextW
SystemParametersInfoW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
GetSystemMetrics
CreateWindowExW
SetCursor
GetSysColorBrush
EndPaint
BeginPaint
DefWindowProcW
GetWindowTextW
gdi32
SetDIBColorTable
LineTo
DeleteDC
CreateCompatibleDC
GetObjectW
MoveToEx
CreatePen
TextOutW
SelectObject
BitBlt
CreateFontA
DeleteObject
SetBkMode
SetTextColor
CreateFontW
CreateDIBSection
advapi32
OpenProcessToken
AdjustTokenPrivileges
ole32
CreateStreamOnHGlobal
shlwapi
StrCmpW
StrCpyW
StrCatW
gdiplus
GdiplusStartup
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ