Static task
static1
Behavioral task
behavioral1
Sample
5c5e9fec373430d178b720438c8dee9e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c5e9fec373430d178b720438c8dee9e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c5e9fec373430d178b720438c8dee9e_JaffaCakes118
-
Size
490KB
-
MD5
5c5e9fec373430d178b720438c8dee9e
-
SHA1
dd08e53803d01a0068ee6f81d47ebd7b609e91bd
-
SHA256
63143175d8fa24ec0a6dcfb457f56d15e95e9efcdb7cee28c141c5f7ce8f8926
-
SHA512
6fbf86291bb8484a84329949463125035b12597c9f31167828204b6e3ee23b2d0bb68315cfa4e896f04e2e673ff720fcb6787e0264382bf4ae370f6dd7fb8d88
-
SSDEEP
6144:bloOm4/XuJOdPs4hZ12wT+bzoHn3QW90RLi8d3AQS0tQ+glpR6agPwxUw9j1MiuR:bKw/XtsqZSPXXRLBAQrQTldJU4jc+k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c5e9fec373430d178b720438c8dee9e_JaffaCakes118
Files
-
5c5e9fec373430d178b720438c8dee9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
af452f0e0cad199dd8f159fa497df108
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetFontData
EnumICMProfilesW
CreateEllipticRgn
SetWorldTransform
CreateRectRgnIndirect
GetTextCharsetInfo
CreateFontIndirectA
EndPage
ResizePalette
CopyEnhMetaFileW
ChoosePixelFormat
GetCharacterPlacementW
SetPaletteEntries
DeleteObject
FillPath
GetSystemPaletteUse
SetBitmapBits
GetCurrentPositionEx
SetBkColor
GdiSetBatchLimit
shell32
SHQueryRecycleBinW
SHGetNewLinkInfo
ShellExecuteEx
wininet
GopherCreateLocatorW
GetUrlCacheEntryInfoExA
HttpOpenRequestA
InternetGetCookieW
kernel32
OpenMutexA
CreateMutexA
SetLastError
GetConsoleScreenBufferInfo
GetStartupInfoW
InitializeCriticalSection
FlushFileBuffers
GetCurrentThreadId
GetConsoleMode
GetTimeZoneInformation
WritePrivateProfileStringW
FreeEnvironmentStringsA
RtlUnwind
SetConsoleCtrlHandler
VirtualAlloc
HeapSize
GetLocaleInfoW
GetVersion
CompareStringA
SetFilePointer
GetSystemTime
lstrcmpiW
GetStartupInfoA
SetEnvironmentVariableA
WriteConsoleInputA
GetUserDefaultLCID
CreateNamedPipeW
FreeLibrary
GetStringTypeA
GetCommandLineA
SetStdHandle
VirtualFree
GetCurrentProcess
IsValidLocale
GetCurrentProcessId
CompareStringW
GetTickCount
CloseHandle
SetHandleCount
EnumCalendarInfoW
WideCharToMultiByte
GetModuleHandleA
CreateFileA
TlsSetValue
HeapFree
InterlockedDecrement
ReadFile
GetDateFormatA
WriteFile
GetStringTypeW
GetProcessAffinityMask
GetStdHandle
LoadLibraryA
GetTimeFormatA
VirtualQuery
GetFileType
LocalAlloc
GetVersionExA
HeapDestroy
CreateFileMappingA
UnhandledExceptionFilter
LeaveCriticalSection
GetModuleFileNameW
GetEnvironmentStrings
GetLocaleInfoA
GetModuleFileNameA
GetDiskFreeSpaceExW
GetLastError
IsValidCodePage
GetCommandLineW
GetCurrentThread
GetSystemTimeAsFileTime
TlsFree
EnumSystemLocalesA
ExitProcess
LCMapStringW
TlsGetValue
HeapCreate
IsDebuggerPresent
FileTimeToLocalFileTime
EnterCriticalSection
SetVolumeLabelA
FreeEnvironmentStringsW
WaitForDebugEvent
LCMapStringA
InterlockedExchange
GetEnvironmentStringsW
GetProcessHeap
GetCPInfo
TlsAlloc
GetConsoleCP
VirtualProtectEx
GetACP
GetOEMCP
Sleep
OpenWaitableTimerW
WriteConsoleW
WriteConsoleA
GetConsoleOutputCP
DeleteCriticalSection
HeapReAlloc
MultiByteToWideChar
SetUnhandledExceptionFilter
HeapAlloc
TerminateProcess
lstrcmpW
QueryPerformanceCounter
GetProcAddress
InterlockedIncrement
PulseEvent
comdlg32
ReplaceTextA
comctl32
InitCommonControlsEx
user32
DdeInitializeW
ClientToScreen
RegisterClassExA
RegisterClassA
Sections
.text Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ