Static task
static1
Behavioral task
behavioral1
Sample
4906b00e819beba8e73772a11620d87f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4906b00e819beba8e73772a11620d87f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4906b00e819beba8e73772a11620d87f_JaffaCakes118
-
Size
264KB
-
MD5
4906b00e819beba8e73772a11620d87f
-
SHA1
77a311327dbe2982784c1e35ce782c1458395e6d
-
SHA256
8a8390866056374e5b47cddf4e203d677d79ad7722a9d556ab1ceca310beda8d
-
SHA512
145f28c770ff9b1cfc883a0352e428e64ddd4166f8b8bbd9bf3aef31c986866b940a1bebc72e06c6ae97385405fba181bade9c07d31a162747a1f2092458fbdd
-
SSDEEP
6144:LjAlxWDq4C61P3e3tJWpw7RPrnjLhF7Anu/TSYChAI9P:PArWOkPudJWpK5njLhFkcChAc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4906b00e819beba8e73772a11620d87f_JaffaCakes118
Files
-
4906b00e819beba8e73772a11620d87f_JaffaCakes118.exe windows:4 windows x86 arch:x86
353ccf7b26566680fc2968fad16b91de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Write
CreatePropertySheetPage
ImageList_BeginDrag
DrawStatusTextA
GetEffectiveClientRect
CreatePropertySheetPageW
DrawInsert
ImageList_Destroy
ImageList_SetFilter
MakeDragList
ImageList_EndDrag
ImageList_SetBkColor
CreateToolbar
CreateToolbarEx
ImageList_Draw
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_Copy
_TrackMouseEvent
CreateUpDownControl
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_GetBkColor
ImageList_DragLeave
InitCommonControlsEx
ImageList_Duplicate
kernel32
LCMapStringW
UnhandledExceptionFilter
EnumTimeFormatsA
LCMapStringA
CompareStringW
GetVersion
LockResource
VirtualQuery
WaitForDebugEvent
InterlockedDecrement
GetSystemTime
GetStringTypeA
SetHandleCount
HeapCreate
HeapAlloc
GetCurrentProcessId
TlsFree
CloseHandle
GetCurrentThreadId
VirtualFree
ReadFile
GetStartupInfoA
InterlockedExchange
GetCPInfo
RtlUnwind
LeaveCriticalSection
GetPrivateProfileStringW
CompareStringA
WideCharToMultiByte
GetTickCount
TlsGetValue
LoadLibraryA
GetFileType
GetEnvironmentStrings
HeapDestroy
GetCommandLineA
TlsAlloc
GetLocalTime
GetCommandLineW
QueryPerformanceCounter
DeleteCriticalSection
GetModuleFileNameW
HeapFree
CreateNamedPipeA
VirtualAlloc
GetModuleFileNameA
InterlockedIncrement
GetCurrentThread
FreeEnvironmentStringsW
SetFilePointer
MultiByteToWideChar
GetEnvironmentStringsW
GetCurrentProcess
InitializeCriticalSection
OpenMutexA
SetEnvironmentVariableA
GetLastError
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsA
WriteFile
HeapReAlloc
CreateMutexA
TerminateProcess
EnterCriticalSection
ExitProcess
GetProcAddress
GetTimeZoneInformation
GetStartupInfoW
TlsSetValue
GetSystemTimeAsFileTime
IsBadWritePtr
SetVolumeLabelA
GetModuleHandleA
GetStdHandle
WritePrivateProfileStructA
FlushFileBuffers
SetLastError
comdlg32
LoadAlterBitmap
FindTextW
wininet
InternetCheckConnectionW
user32
SetWindowPos
DrawFocusRect
CreateWindowExW
SetClipboardViewer
RegisterClassExA
GetDlgItemTextA
RedrawWindow
ChangeMenuA
ShowWindow
SetDlgItemInt
CharPrevW
MessageBoxA
ChildWindowFromPointEx
SendInput
WaitForInputIdle
DdeFreeStringHandle
RegisterClassExW
CharLowerBuffA
ValidateRect
MessageBoxIndirectA
EndMenu
RegisterClassA
CreateDialogIndirectParamW
SetDlgItemTextW
OpenDesktopW
AdjustWindowRectEx
GetFocus
DestroyWindow
GrayStringA
WINNLSGetIMEHotkey
EnumWindows
DefWindowProcW
MapDialogRect
CascadeChildWindows
SetActiveWindow
ScrollWindow
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ