Static task
static1
Behavioral task
behavioral1
Sample
47bdd64c83454c2bd283705fd821feec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
47bdd64c83454c2bd283705fd821feec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
47bdd64c83454c2bd283705fd821feec_JaffaCakes118
-
Size
319KB
-
MD5
47bdd64c83454c2bd283705fd821feec
-
SHA1
31dccb0754cea87eaa3a7b2556fce1c83fb0807e
-
SHA256
8a6b2d166969d8792c98e6699140dca70522cc53d7124fb4b196bcb15f0d0e2c
-
SHA512
6cc9dd468665afe10d8253e7005f26576235533449dcfbe41f2efa3b12cc8ea7431961f7d6afabe34e4cf43244500d8f2898687b3d135908a227cd7cdd94aa20
-
SSDEEP
6144:zaG+A37O3RUtvqGq8+Ez377fTKYye4YK/QqS+BlvjdlRVEg:d374Ue8+ivfTJh4lZlRV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47bdd64c83454c2bd283705fd821feec_JaffaCakes118
Files
-
47bdd64c83454c2bd283705fd821feec_JaffaCakes118.exe windows:4 windows x86 arch:x86
07e7728ec206e1fa8294fa8534d8f2dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DuplicateIcon
SHInvokePrinterCommandA
SHGetSpecialFolderPathA
DragQueryFileW
FindExecutableA
comdlg32
PageSetupDlgW
user32
GetClassWord
RegisterClipboardFormatA
NotifyWinEvent
RegisterClassExA
RegisterClassA
GetWindowTextA
WINNLSGetEnableStatus
TabbedTextOutA
LookupIconIdFromDirectoryEx
wininet
HttpOpenRequestA
GetUrlCacheEntryInfoW
SetUrlCacheEntryInfoA
InternetGetLastResponseInfoW
InternetCheckConnectionW
FtpFindFirstFileA
ShowClientAuthCerts
InternetCloseHandle
gdi32
SetColorAdjustment
GetBitmapBits
CreateDCW
GetGlyphOutlineW
EnumICMProfilesW
comctl32
InitCommonControlsEx
kernel32
GetTimeFormatA
VirtualAlloc
WaitForSingleObject
VirtualQuery
SetConsoleTitleW
GetCommandLineA
LCMapStringW
SetStdHandle
HeapSize
GetStringTypeW
GetLastError
HeapReAlloc
GetConsoleOutputCP
GetSystemTimeAsFileTime
GetEnvironmentStrings
EnterCriticalSection
CompareStringW
GetLogicalDriveStringsA
InterlockedExchange
LeaveCriticalSection
GetCurrentProcessId
GetOEMCP
LoadLibraryA
ReadFile
VirtualFree
GetUserDefaultLCID
FlushFileBuffers
GetCurrentThreadId
LockResource
SetHandleCount
HeapAlloc
GetConsoleMode
ReadConsoleOutputCharacterA
TlsFree
GetThreadPriorityBoost
HeapDestroy
GetFileType
GetDateFormatA
GetStartupInfoA
OpenMutexA
GetACP
FreeLibrary
GetVersionExA
MapViewOfFileEx
GetCurrentProcess
CreateMutexA
GetProcessHeap
IsDebuggerPresent
GetCPInfo
CreateFileA
HeapCreate
GetStdHandle
GetTickCount
TlsGetValue
SetUnhandledExceptionFilter
CreateFileMappingA
FreeEnvironmentStringsA
SetConsoleCtrlHandler
SetEnvironmentVariableA
WriteConsoleW
IsValidLocale
GetCurrentThread
LCMapStringA
DeleteCriticalSection
WriteFile
CloseHandle
GetLongPathNameA
GetConsoleCP
HeapFree
GetNamedPipeHandleStateA
MultiByteToWideChar
QueryPerformanceCounter
WriteConsoleA
GetModuleHandleA
TlsAlloc
SetFilePointer
RtlUnwind
GetShortPathNameA
IsValidCodePage
GetStringTypeExW
UnhandledExceptionFilter
EnumSystemLocalesA
GetFileAttributesW
InterlockedIncrement
TlsSetValue
TerminateProcess
GetModuleFileNameA
GetStringTypeA
WideCharToMultiByte
GetPrivateProfileSectionNamesW
CompareStringA
ExitProcess
GetLocaleInfoW
InterlockedDecrement
Sleep
GetProcAddress
GetLocaleInfoA
SetLastError
GetTimeZoneInformation
GetAtomNameW
FreeEnvironmentStringsW
GetTempFileNameA
GetEnvironmentStringsW
InitializeCriticalSection
Sections
.text Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ