Static task
static1
Behavioral task
behavioral1
Sample
4cac0bd0b2be310a6e6da856a62b01cc_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4cac0bd0b2be310a6e6da856a62b01cc_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4cac0bd0b2be310a6e6da856a62b01cc_JaffaCakes118
-
Size
385KB
-
MD5
4cac0bd0b2be310a6e6da856a62b01cc
-
SHA1
76626bc9abd4362c3249ecddbf5123b737a81116
-
SHA256
22307008668690b021fe7b5a4ab8d207902993bfc9587ce5afe8a857a4cf594f
-
SHA512
62b55ba1bb580b52ccb74d0253e71b021f83e6ba9e87af466dcc0867928ae52e10381f03f1403af80cf502fae2c5275733afbbbac1e42f1ce3cdeb30df0644f3
-
SSDEEP
6144:/U3j1scrIsFr/PDCQk78qoYjsxApCpCSR3XO+NZxZfKCEvJq2CqiW18:MT1sMIw/PuL7doHApCpxO+XxZmRvC8i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4cac0bd0b2be310a6e6da856a62b01cc_JaffaCakes118
Files
-
4cac0bd0b2be310a6e6da856a62b01cc_JaffaCakes118.exe windows:4 windows x86 arch:x86
d23db2ccba21a2510f49442308e50905
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
GetProcessHeap
TlsAlloc
lstrcpyA
IsDBCSLeadByte
SetEvent
ResetEvent
WaitForSingleObject
CreateFileA
ReadFile
WriteFile
GetFullPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrlenA
lstrcmpA
GetTickCount
FormatMessageA
ExitProcess
FindAtomA
lstrcatA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetOEMCP
SetupComm
OutputDebugStringA
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleA
GlobalAlloc
GlobalLock
GlobalUnlock
InterlockedDecrement
lstrlenW
DeviceIoControl
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
HeapReAlloc
VirtualAlloc
HeapAlloc
GetCPInfo
GetACP
LoadLibraryA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetLastError
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
VirtualQuery
GetVersionExA
GetStartupInfoA
RtlUnwind
LocalFree
GetSystemInfo
LocalAlloc
GetCurrentProcessId
SetUnhandledExceptionFilter
CreateFileW
CloseHandle
InterlockedExchange
Sleep
InterlockedCompareExchange
GetCommandLineA
MultiByteToWideChar
VirtualProtect
user32
GetKeyState
IntersectRect
GetAsyncKeyState
EqualRect
GetClassLongW
EnumWindows
GetDCEx
IsWindowVisible
ShowWindow
GetWindowDC
GetWindowPlacement
IsIconic
GetClassInfoExW
CreateAcceleratorTableW
GetClientRect
DestroyWindow
GetSysColor
GetWindowLongW
DefWindowProcW
SetWindowLongW
CallWindowProcW
GetFocus
SendMessageW
SetKeyboardState
GetKeyboardState
CreateWindowExW
GetMessageW
PeekMessageW
TranslateMessage
DispatchMessageW
SetForegroundWindow
InflateRect
OffsetRect
DrawEdge
RedrawWindow
UnregisterClassA
SystemParametersInfoA
IsWindow
wsprintfW
wsprintfA
GetDlgItemTextA
EndDialog
LoadStringA
EnableWindow
GetParent
SetWindowLongA
MoveWindow
GetSystemMetrics
CreateWindowExA
DefWindowProcA
IsClipboardFormatAvailable
SetDlgItemTextA
SetFocus
GetDlgItem
GetWindowLongA
PostMessageA
ReleaseDC
GetDC
CharNextExA
SendMessageA
GetSubMenu
SetMenuItemInfoA
SetWindowTextA
GetWindowRect
SetWindowPos
GetDlgCtrlID
WinHelpA
SetTimer
MessageBoxA
KillTimer
advapi32
RegCloseKey
RegOpenKeyExA
LogonUserA
RegQueryValueExW
RegQueryValueExA
gdi32
GetTextExtentPoint32A
CreateSolidBrush
DeleteObject
SelectObject
PatBlt
ole32
CoTaskMemAlloc
CreateStreamOnHGlobal
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ