Static task
static1
Behavioral task
behavioral1
Sample
60124c67b605641988cb7d248d51a77d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
60124c67b605641988cb7d248d51a77d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
60124c67b605641988cb7d248d51a77d_JaffaCakes118
-
Size
340KB
-
MD5
60124c67b605641988cb7d248d51a77d
-
SHA1
863935c5b16606f4f3a1699ba58e4ae93ebf3ce0
-
SHA256
95e1684087d13ad93b779b09e17e4b6c229671710bc6bbf56094c83a46c76e4f
-
SHA512
853bc6e60b01d7080700c56bc29b348f0138001489d008ef0338418b831ef6c36009cb6c83b8a3c670b8df8948ba51332133e3d67a6d2c5cea4f7cc2e8c8d6b7
-
SSDEEP
6144:jIYgBTyXaJC8r8SZsr18psFlMOiZo5ROGEXISjei:MYzqJD8WsFSjo5R1g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60124c67b605641988cb7d248d51a77d_JaffaCakes118
Files
-
60124c67b605641988cb7d248d51a77d_JaffaCakes118.exe windows:4 windows x86 arch:x86
af48fbea09c3b16d5654e79b673e2b99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EnumClipboardFormats
PeekMessageA
GetMenuCheckMarkDimensions
IsDialogMessageA
OffsetRect
GetPropW
DefWindowProcW
SetWindowPos
GetMenuBarInfo
GetProcessDefaultLayout
RegisterClassA
OpenWindowStationA
DdeInitializeA
IsDialogMessageW
BlockInput
OemToCharW
IsCharAlphaNumericA
CreateWindowExW
MapDialogRect
UnregisterHotKey
AppendMenuA
GetCapture
GetProcessWindowStation
CharToOemBuffA
SubtractRect
RegisterWindowMessageW
PostMessageA
DestroyWindow
ShowWindow
RegisterClassExA
SetSystemCursor
WINNLSGetEnableStatus
InSendMessageEx
CharNextExA
MessageBoxA
TranslateMessage
ReplyMessage
GetKeyboardLayoutList
kernel32
GetLongPathNameW
FreeEnvironmentStringsW
GetFileType
HeapCreate
GetModuleFileNameW
GetTickCount
HeapAlloc
GetPrivateProfileSectionA
GetStringTypeW
GetModuleFileNameA
GetProcAddress
EnumCalendarInfoExA
GetTimeFormatA
SetLocaleInfoW
SetConsoleWindowInfo
ExitProcess
FreeEnvironmentStringsA
EnumCalendarInfoExW
GetLocalTime
HeapDestroy
InterlockedExchange
GetCurrentThreadId
GetTimeZoneInformation
GetCurrentProcessId
SetFilePointer
CompareStringW
GetLastError
QueryPerformanceCounter
SetLastError
TlsFree
GlobalAddAtomA
LeaveCriticalSection
TerminateProcess
AddAtomW
CreateMutexA
HeapLock
VirtualQuery
LCMapStringW
GetCPInfo
GetStartupInfoA
DeleteCriticalSection
WideCharToMultiByte
GetVersion
OpenMutexA
InterlockedDecrement
VirtualFree
GetCommandLineW
OutputDebugStringW
DebugBreak
WritePrivateProfileStructA
LocalAlloc
WaitNamedPipeW
GetEnvironmentStrings
GetCalendarInfoW
WriteConsoleOutputW
CreateFileA
TlsGetValue
TlsAlloc
GetTempFileNameA
WriteFile
VirtualAlloc
LoadLibraryA
EnterCriticalSection
GetSystemTime
HeapFree
InitializeCriticalSection
HeapReAlloc
OpenSemaphoreW
GetAtomNameW
UnhandledExceptionFilter
GetStdHandle
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentDirectoryW
ReadFile
GetCurrentThread
FlushFileBuffers
SetEnvironmentVariableA
SetStdHandle
WriteProfileStringW
WriteConsoleA
LCMapStringA
TlsSetValue
LoadResource
GetStringTypeA
SuspendThread
GetStartupInfoW
GetDateFormatW
GetNumberFormatA
CreateSemaphoreA
CloseHandle
MultiByteToWideChar
GetEnvironmentStringsW
CompareStringA
SetCurrentDirectoryA
IsBadWritePtr
GetDiskFreeSpaceA
GetPriorityClass
FindResourceExA
InterlockedIncrement
SetHandleCount
FindFirstFileExW
GetModuleHandleA
GetCommandLineA
GetCurrentProcess
comctl32
ImageList_SetFlags
ImageList_AddIcon
ImageList_GetImageCount
ImageList_Duplicate
InitCommonControlsEx
ImageList_Remove
ImageList_BeginDrag
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ