Static task
static1
Behavioral task
behavioral1
Sample
5dac4b44820db54cf12e01e9b6d15ace_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5dac4b44820db54cf12e01e9b6d15ace_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5dac4b44820db54cf12e01e9b6d15ace_JaffaCakes118
-
Size
220KB
-
MD5
5dac4b44820db54cf12e01e9b6d15ace
-
SHA1
ea280f61fbb17878de9604c26a384ac168c8cf4a
-
SHA256
5c2afafaf63632b3dc66fcc2aeadcf521ee0e02fc7ab192668c0839be6383ed2
-
SHA512
992200ebc3b6f5dd82e80029e7f77aa91a4db652d07807a557eb66cf9d42b7dbcb042c134b5c03e9b8bb799513102da9def68babeac84ee1a73f08b61a2f1c08
-
SSDEEP
3072:Cyk2WawgCeyEguY5TlZVdWKzl9fHTTn2Wj:Cy1WKyEmlZX7jfzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dac4b44820db54cf12e01e9b6d15ace_JaffaCakes118
Files
-
5dac4b44820db54cf12e01e9b6d15ace_JaffaCakes118.exe windows:4 windows x86 arch:x86
4987c021543a5e043cfce0bd1cee19dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetLongPathNameA
GetTempPathA
CreateProcessA
WideCharToMultiByte
TerminateProcess
GetExitCodeProcess
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
ExpandEnvironmentStringsA
GetVersionExA
GetCurrentProcess
GetModuleFileNameA
GetPrivateProfileStringA
GetFileSize
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
LoadLibraryA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
HeapSize
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
ReadFile
CreateFileA
WriteFile
Sleep
CloseHandle
CreateThread
WaitForSingleObject
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
GetWindowsDirectoryA
MoveFileExA
GetSystemTime
WinExec
DeleteFileA
GetFileAttributesA
CopyFileA
CreateMutexA
GetLastError
ReleaseMutex
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetProcAddress
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
HeapFree
RtlUnwind
RaiseException
GetTimeZoneInformation
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
SetEnvironmentVariableA
user32
DialogBoxParamA
EnableWindow
EndDialog
GetDlgItem
MessageBoxA
SetTimer
GetDesktopWindow
WaitForInputIdle
PeekMessageA
TranslateMessage
DispatchMessageA
GetMessageA
InvalidateRect
LoadBitmapA
GetDC
ReleaseDC
SetWindowTextA
SetRect
KillTimer
GetSystemMetrics
MoveWindow
LoadIconA
SendMessageA
gdi32
DeleteObject
CreateCompatibleDC
CreateFontA
SelectObject
StretchBlt
SetBkMode
SetTextColor
BitBlt
DeleteDC
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegFlushKey
RegCloseKey
shell32
SHGetSpecialFolderPathA
wininet
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
netapi32
Netbios
iphlpapi
GetAdaptersInfo
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ