Static task
static1
Behavioral task
behavioral1
Sample
609fdd90d94e6c93c9871d42d239a675_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
609fdd90d94e6c93c9871d42d239a675_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
609fdd90d94e6c93c9871d42d239a675_JaffaCakes118
-
Size
180KB
-
MD5
609fdd90d94e6c93c9871d42d239a675
-
SHA1
27c022140223c37150967c6d06ec1ad0d632d86f
-
SHA256
87fbafac314d43af2e4f260e04179c0da8436dedd4404dadab931ef738419471
-
SHA512
7b0c3f4af13b642bd9848f9a51ce8a3d5a9a798fd5c12e9c0fac824a5fa588f3de848550bda8091f1931a8f51559860037b264e2e73a8159624b7235677bb98d
-
SSDEEP
3072:Wa1ebyZT5ZcCwlFw14fuokCtr8MhBak7Fg/BoIsVJbFgUFcQGp1:zZal9EEak7EBoIsVJpgEcQW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 609fdd90d94e6c93c9871d42d239a675_JaffaCakes118
Files
-
609fdd90d94e6c93c9871d42d239a675_JaffaCakes118.exe windows:4 windows x86 arch:x86
83d76a693262140ef489ada0f633a25c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringW
CreateEventA
CreateMutexA
DuplicateHandle
ExpandEnvironmentStringsA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindResourceA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
FreeResource
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetDriveTypeA
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetLocaleInfoW
GetModuleFileNameA
GetModuleHandleW
GetProcessHeap
GetStartupInfoA
GetStringTypeA
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameA
GetTempPathW
GetVersionExA
GetVersionExW
GlobalAddAtomA
GlobalFindAtomA
GlobalFree
GlobalHandle
GlobalUnlock
HeapSize
InterlockedCompareExchange
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsDebuggerPresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryExW
LocalAlloc
LocalFileTimeToFileTime
LocalFree
MapViewOfFile
MoveFileA
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
RemoveDirectoryA
ResetEvent
ResumeThread
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
SystemTimeToFileTime
TlsAlloc
TlsGetValue
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcpyA
lstrlenW
user32
CharNextA
CloseClipboard
CreateMenu
DefWindowProcA
DeleteMenu
DestroyIcon
DialogBoxParamA
DrawIconEx
DrawMenuBar
DrawTextA
EnableMenuItem
EndPaint
GetActiveWindow
GetCapture
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDCEx
GetFocus
GetForegroundWindow
GetIconInfo
GetMenu
GetMenuItemCount
GetMenuState
GetPropA
GetScrollInfo
GetSysColorBrush
GetSystemMetrics
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowTextA
InsertMenuA
IsDialogMessageA
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
LoadBitmapA
LoadIconA
LoadStringA
MessageBeep
PeekMessageA
PostMessageA
RegisterWindowMessageA
RemoveMenu
RemovePropA
SetClipboardData
SetFocus
SetForegroundWindow
SetPropA
SetRect
SetScrollRange
SetTimer
ShowCursor
ShowWindow
UnhookWindowsHookEx
UpdateWindow
WaitMessage
WinHelpA
WindowFromPoint
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE