Static task
static1
Behavioral task
behavioral1
Sample
4a8d5e8a95b10f35d09c8ce2389c96b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a8d5e8a95b10f35d09c8ce2389c96b7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4a8d5e8a95b10f35d09c8ce2389c96b7_JaffaCakes118
-
Size
356KB
-
MD5
4a8d5e8a95b10f35d09c8ce2389c96b7
-
SHA1
3ec6e236fd6e3aad06266d601d0a5be00f520242
-
SHA256
fad093101b16f6970efbd8d89c34188934ec3fb2976fdbdab68dc45f4a0bfc97
-
SHA512
5de8049d01750468b50343cf9752230b73df730bff58519655bbd07411c012c9eaa51ed4dcbd64edbce2a83ec92fdbc591693be34d7e34c1cfbe39e8a103379e
-
SSDEEP
6144:1acapm/OxULLfwPKPqlUSaKhfFnPm9bZTBJl7DAOFKBrLWCexnT:4ommL+KPcaKh9nuFTfl7DCrLcx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a8d5e8a95b10f35d09c8ce2389c96b7_JaffaCakes118
Files
-
4a8d5e8a95b10f35d09c8ce2389c96b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
72d04b5f126c1ca4276e06437a540067
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
FindClose
SearchPathW
GetBinaryTypeW
CopyFileExW
SystemTimeToFileTime
CancelIo
GetSystemTime
GetFileSizeEx
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LockFileEx
GetFileAttributesW
LockFile
FlushFileBuffers
WriteFileEx
GetFileSize
CreateFileMappingW
CreateFileA
CreateHardLinkW
GetModuleFileNameA
FlushViewOfFile
SetFilePointer
MoveFileExW
UnlockFileEx
SetFileTime
ReadFileScatter
ReadFileEx
GetFileTime
MapViewOfFileEx
GetLongPathNameW
SetFileAttributesW
TerminateProcess
GetFullPathNameW
Sleep
GetTempPathW
UnlockFile
GetFileAttributesExW
SetFileApisToOEM
MoveFileW
FindNextFileW
GetProcAddress
LoadLibraryA
SetFilePointerEx
PostQueuedCompletionStatus
GetCompressedFileSizeW
WinExec
DeleteFileW
SearchPathA
GetShortPathNameA
DeleteFileA
GetShortPathNameW
GetSystemDirectoryW
GetQueuedCompletionStatus
WideCharToMultiByte
FindFirstFileW
ExitProcess
AreFileApisANSI
MultiByteToWideChar
GetLastError
CreateMutexW
GetModuleHandleA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetModuleHandleW
GetModuleFileNameW
WriteFileGather
ReplaceFileW
GetTempFileNameW
SetFileShortNameW
GetTickCount
GetFileInformationByHandle
CopyFileW
SetFileApisToANSI
CreateIoCompletionPort
WriteFile
CreateFileW
MapViewOfFile
SetEndOfFile
GetFileType
CloseHandle
MoveFileWithProgressW
FindFirstFileExW
OpenFileMappingW
SetFileValidData
UnmapViewOfFile
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
GetConsoleMode
GetConsoleCP
HeapSize
HeapAlloc
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
ExitThread
ResumeThread
CreateThread
GetVersionExA
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
user32
GetClientRect
GetWindowDC
ReleaseDC
GetDesktopWindow
GetWindowRect
CreateWindowExW
DrawTextW
SetTimer
LoadCursorW
ShowWindow
UpdateWindow
GetDC
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
gdi32
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
SetFileSecurityW
RegCreateKeyExW
shell32
SHGetFolderPathA
rpcrt4
UuidCreate
RpcStringFreeW
UuidToStringW
wininet
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
Sections
.text Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 57KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ