Static task
static1
Behavioral task
behavioral1
Sample
4d10bea9ce25eae2da204701c17ceef9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d10bea9ce25eae2da204701c17ceef9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4d10bea9ce25eae2da204701c17ceef9_JaffaCakes118
-
Size
336KB
-
MD5
4d10bea9ce25eae2da204701c17ceef9
-
SHA1
71c96690181de6279667368ab65b6e123d92af55
-
SHA256
5d8397458f2cd181c144da063a3acbe59e3e1d63792dc6fb336a9fb9bcb0a73f
-
SHA512
8a349cd10f4b4239bae1a12ca86d7b243f0150353d292ea47acd110828135d4bc8f899f79b42c59e54f7ab6d1003307f9659bc59470064130c80c9da02bfe2ae
-
SSDEEP
6144:f1eqibNGuv413g+1pGfPFLpd+yT1R4294lqftzpJYw+HRngM:f1Uv4lg+qfPFLpdFTf994Qtzpsf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d10bea9ce25eae2da204701c17ceef9_JaffaCakes118
Files
-
4d10bea9ce25eae2da204701c17ceef9_JaffaCakes118.exe windows:4 windows x86 arch:x86
2d02971f90b98cbff58bb7ff611c3f87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumSystemCodePagesW
GetPrivateProfileStringA
QueryDosDeviceW
FindCloseChangeNotification
GetModuleHandleA
SetConsoleTitleA
ReleaseSemaphore
GlobalFlags
GetDateFormatA
GetNumberFormatW
PrepareTape
WriteProcessMemory
GetStartupInfoA
DuplicateHandle
SetThreadLocale
GetTempPathW
GetSystemDirectoryW
CreateDirectoryExA
lstrcmpiA
GetLongPathNameA
SetStdHandle
OpenFile
SetEnvironmentVariableW
CreatePipe
MoveFileW
SearchPathW
GetTempFileNameA
GetCommState
SetMailslotInfo
GetDriveTypeW
GetOverlappedResult
GetTimeZoneInformation
CreateMutexW
lstrcmpiW
SetHandleCount
GetCommandLineW
CreateProcessA
GetCurrentProcess
CopyFileExW
EnumResourceNamesW
RemoveDirectoryA
CreateNamedPipeW
GlobalAddAtomW
SetFileTime
FindResourceExA
FatalAppExitA
CreateWaitableTimerA
GetSystemTimeAdjustment
_lread
GetHandleInformation
DeleteFiber
WaitNamedPipeA
GetLargestConsoleWindowSize
GetCompressedFileSizeW
LoadLibraryExA
GetDiskFreeSpaceExA
GetConsoleCursorInfo
TlsGetValue
CreateIoCompletionPort
_lclose
GetDiskFreeSpaceW
SizeofResource
IsProcessorFeaturePresent
EnumSystemCodePagesA
EnumResourceNamesA
GetEnvironmentVariableW
OutputDebugStringA
GetSystemTime
FormatMessageW
AllocConsole
GetCPInfo
GetSystemInfo
GetStringTypeExW
FreeLibraryAndExitThread
IsDBCSLeadByteEx
DeleteCriticalSection
WritePrivateProfileSectionW
SetCommMask
FindNextChangeNotification
GetShortPathNameA
SetNamedPipeHandleState
RaiseException
QueryDosDeviceA
lstrcmpA
GlobalReAlloc
ReleaseMutex
SetEndOfFile
_lopen
GetVersion
MoveFileExA
FindFirstFileExW
ReadFileScatter
AreFileApisANSI
WriteConsoleOutputW
EndUpdateResourceA
DosDateTimeToFileTime
PurgeComm
WritePrivateProfileSectionA
GetCommandLineA
GetVersionExA
VirtualProtect
CancelIo
ExitProcess
user32
AdjustWindowRectEx
DestroyAcceleratorTable
DestroyCursor
GetAsyncKeyState
IsWindowEnabled
CharLowerW
EnumDisplayDevicesA
PostMessageA
CreateMDIWindowW
GetMenuItemRect
CreateIconFromResource
InsertMenuA
IsCharUpperA
EnumDesktopsA
CheckMenuItem
DialogBoxIndirectParamA
GetMenuItemInfoW
GetClipboardSequenceNumber
OpenDesktopW
MapVirtualKeyW
GetUpdateRect
GetClipCursor
ReleaseCapture
InvalidateRgn
SetScrollPos
GetMenuState
InsertMenuItemA
GetClassNameA
BeginPaint
GetMenuItemCount
wvsprintfW
DefFrameProcA
SetWindowLongW
SwitchToThisWindow
DrawIconEx
PostQuitMessage
CloseWindowStation
MsgWaitForMultipleObjects
gdi32
GetObjectA
ExtTextOutA
OffsetRgn
comdlg32
FindTextW
advapi32
OpenThreadToken
SetSecurityDescriptorOwner
AddAccessAllowedAce
LookupPrivilegeNameA
RegEnumKeyExA
EnumServicesStatusW
SetSecurityDescriptorGroup
AllocateAndInitializeSid
RegConnectRegistryW
RegEnumKeyW
OpenSCManagerA
LookupPrivilegeValueW
CryptImportKey
GetExplicitEntriesFromAclW
RegDeleteKeyA
ObjectDeleteAuditAlarmW
shell32
ExtractIconA
SHGetPathFromIDListA
DragFinish
SHGetDesktopFolder
ole32
OleSaveToStream
CoInitializeEx
PropVariantCopy
shlwapi
ChrCmpIW
SHRegSetUSValueW
PathUnquoteSpacesW
PathRemoveFileSpecW
SHRegGetUSValueW
setupapi
SetupFindFirstLineA
SetupDiSetDeviceInstallParamsA
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
Sections
.text Size: 316KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE