Static task
static1
Behavioral task
behavioral1
Sample
5bbb0376a3d7b35c202cd00ac47e22ac_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5bbb0376a3d7b35c202cd00ac47e22ac_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5bbb0376a3d7b35c202cd00ac47e22ac_JaffaCakes118
-
Size
450KB
-
MD5
5bbb0376a3d7b35c202cd00ac47e22ac
-
SHA1
5b5e8d5a2e14b7760f5ef6ff13d9b797a01a0fa0
-
SHA256
1503394a423bf4424a497d4d7caed1a5a03f33243621ec8ecdb2589c716f162a
-
SHA512
b72be3af398a0b0b36f0ac7fd6f18da406ceb9c0179e6e701cebf99585966299e137a3de0a92f123a7d0c1a10582e64564b0c7bc6e0e6fa75092c47b55c47ecc
-
SSDEEP
12288:o9s4RfClzMdo8A2a6m+wEk2da004ABXhhKsigub/:omuVaiU0mXbKsirb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5bbb0376a3d7b35c202cd00ac47e22ac_JaffaCakes118
Files
-
5bbb0376a3d7b35c202cd00ac47e22ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
88e71ca94b0fb0a4762242c775dfc7eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
LookupAccountNameW
CryptSetProviderExW
CryptHashSessionKey
RegRestoreKeyA
RegOpenKeyA
RegOpenKeyExW
RevertToSelf
DuplicateTokenEx
RegLoadKeyW
CryptEnumProviderTypesW
RegEnumKeyExW
GetUserNameA
CryptAcquireContextA
RegRestoreKeyW
LookupSecurityDescriptorPartsW
RegEnumValueA
InitiateSystemShutdownA
CryptGenKey
LogonUserW
RegNotifyChangeKeyValue
LookupAccountSidA
CryptSetProviderA
CryptDestroyHash
wininet
DetectAutoProxyUrl
InternetLockRequestFile
InternetTimeFromSystemTimeW
FtpSetCurrentDirectoryA
InternetConfirmZoneCrossingA
InternetConfirmZoneCrossingW
InternetSetOptionExA
HttpCheckDavCompliance
InternetWriteFileExA
FindNextUrlCacheEntryW
InternetSetOptionW
InternetConnectW
InternetConfirmZoneCrossing
InternetCreateUrlA
InternetCanonicalizeUrlA
UnlockUrlCacheEntryFileA
FindCloseUrlCache
CommitUrlCacheEntryA
IsHostInProxyBypassList
InternetCheckConnectionA
InternetGetConnectedStateExA
shell32
ExtractIconExW
SHChangeNotify
SHInvokePrinterCommandW
user32
TabbedTextOutA
GetTitleBarInfo
GetDC
WINNLSEnableIME
DispatchMessageW
GetWindowRect
PackDDElParam
WaitForInputIdle
InsertMenuItemW
SetCursor
IsIconic
DefFrameProcA
DefDlgProcA
SystemParametersInfoA
kernel32
EnterCriticalSection
LCMapStringA
GetStdHandle
OpenSemaphoreA
IsValidCodePage
GetCurrentThreadId
GetFileType
GetStartupInfoW
WideCharToMultiByte
DeleteFileA
SetConsoleCtrlHandler
InterlockedIncrement
EnumSystemLocalesA
GetCurrentProcess
GetDateFormatA
HeapFree
SetLastError
Sleep
GetTickCount
ExitProcess
TlsAlloc
GetStartupInfoA
GetACP
VirtualAlloc
GetModuleFileNameA
LeaveCriticalSection
WriteConsoleOutputA
LCMapStringW
VirtualQuery
GetStringTypeW
FreeEnvironmentStringsW
DeleteCriticalSection
GetCurrentProcessId
HeapReAlloc
SetEnvironmentVariableA
UnhandledExceptionFilter
TlsSetValue
GlobalFix
GetTimeFormatA
CompareStringA
InterlockedDecrement
SetUnhandledExceptionFilter
TlsGetValue
FreeLibrary
HeapSize
InterlockedExchange
GetCPInfo
GetModuleFileNameW
WaitNamedPipeW
MultiByteToWideChar
GetModuleHandleW
CompareStringW
GetLastError
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
RtlUnwind
QueryPerformanceCounter
WriteFile
HeapDestroy
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTime
GetCurrentThread
HeapCreate
GetProcAddress
TlsFree
IsDebuggerPresent
SetHandleCount
GetOEMCP
IsValidLocale
VirtualFree
HeapAlloc
GetStringTypeA
SetThreadContext
GetLocaleInfoW
LoadLibraryA
GetCommandLineW
GetEnvironmentStringsW
GetModuleHandleA
GetTimeZoneInformation
TerminateProcess
gdi32
SetDeviceGammaRamp
GetEnhMetaFileW
DrawEscape
CombineRgn
CreateFontIndirectW
CreateMetaFileW
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ