Static task
static1
Behavioral task
behavioral1
Sample
61ffd285070a27b91fa8f62a0b88d72b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61ffd285070a27b91fa8f62a0b88d72b_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
61ffd285070a27b91fa8f62a0b88d72b_JaffaCakes118
-
Size
348KB
-
MD5
61ffd285070a27b91fa8f62a0b88d72b
-
SHA1
6f157c803f46f1514ccf10272ba08a41644e5897
-
SHA256
e519dfb5357eee576e8bd395a44efcb03acf786f7cb466e6ff7e10b7b3f25fdd
-
SHA512
d52b5acdbf2251dbc3ce7bff7aad46d1e2f56f693aa9b5836702fd3504fb27ef6ba0009d92f2ef5a6c902d11f93909ff9c2ddd8b85cc60e64a962e9afce41c11
-
SSDEEP
6144:sg6ajq32xd8EsAlZy2YkjJK2zFeCLuN0pc0TUF3RtBZl9pAsPr+0B8xWQvzeeBHb:vVjqGxW5KZJY4k2hLuy1TClLnPVyv3B7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61ffd285070a27b91fa8f62a0b88d72b_JaffaCakes118
Files
-
61ffd285070a27b91fa8f62a0b88d72b_JaffaCakes118.exe windows:4 windows x86 arch:x86
270adc3e1a5c272b23ebb26143b284b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConfirmZoneCrossing
FtpGetCurrentDirectoryW
SetUrlCacheGroupAttributeW
ShowSecurityInfo
shell32
SHGetNewLinkInfo
SHFreeNameMappings
DoEnvironmentSubstW
comctl32
DrawInsert
CreateUpDownControl
ImageList_DragMove
ImageList_Merge
ImageList_ReplaceIcon
CreateStatusWindowW
ImageList_GetImageCount
InitCommonControlsEx
ImageList_Duplicate
ImageList_Replace
CreatePropertySheetPageW
CreateStatusWindow
ImageList_SetOverlayImage
ImageList_DragEnter
ImageList_SetFilter
ImageList_SetFlags
ImageList_Destroy
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_Draw
ImageList_Copy
user32
InsertMenuW
RegisterClassExA
UnionRect
RegisterClassA
CreateDesktopA
SubtractRect
IsCharLowerW
DdeAbandonTransaction
DdeCreateDataHandle
kernel32
ReadFile
WriteFile
GetLocaleInfoA
GetCurrentProcessId
SetConsoleWindowInfo
SetTimeZoneInformation
GetStringTypeA
GetCurrentThread
GetVersionExA
FreeEnvironmentStringsW
VirtualLock
LCMapStringA
MultiByteToWideChar
IsDebuggerPresent
HeapReAlloc
GetCurrentProcess
LocalFileTimeToFileTime
CloseHandle
TlsSetValue
GetEnvironmentStringsW
EnumSystemLocalesA
GetFileAttributesA
FindFirstFileW
LoadLibraryExW
CreateMailslotA
HeapDestroy
GetUserDefaultLCID
InterlockedIncrement
SetFilePointer
TlsFree
FreeEnvironmentStringsA
GetProcAddress
GetLogicalDriveStringsA
GetTimeZoneInformation
GetConsoleOutputCP
SetStdHandle
GetCurrentThreadId
RtlUnwind
SetUnhandledExceptionFilter
HeapFree
lstrlenA
GetTimeFormatA
GetOEMCP
TlsAlloc
HeapAlloc
GetDiskFreeSpaceA
CreateMutexA
CreateDirectoryExW
GetStdHandle
WriteFileEx
GetLastError
GetConsoleMode
GetACP
ExitProcess
QueryPerformanceCounter
InitializeCriticalSection
VirtualAlloc
IsValidLocale
WriteConsoleW
GetModuleFileNameA
CreateFileA
GetConsoleCP
SetEnvironmentVariableA
WriteConsoleA
GetProcessHeap
HeapSize
VirtualFree
FlushFileBuffers
SetLastError
DeleteCriticalSection
LoadLibraryA
SetConsoleCtrlHandler
CompareStringA
EnterCriticalSection
LocalSize
LeaveCriticalSection
SetHandleCount
TerminateProcess
WideCharToMultiByte
GetCommandLineA
GetWindowsDirectoryW
GetDiskFreeSpaceExW
IsValidCodePage
GetTickCount
GetStartupInfoA
OpenMutexA
GetFileType
FlushInstructionCache
UnhandledExceptionFilter
TlsGetValue
LocalAlloc
VirtualQuery
GetModuleHandleA
GetDateFormatA
LCMapStringW
GetSystemTimeAsFileTime
Sleep
InterlockedExchange
HeapCreate
CreateDirectoryW
InterlockedDecrement
GetEnvironmentStrings
GetStringTypeExA
CompareStringW
FreeLibrary
GetCPInfo
GetLocaleInfoW
GetStringTypeW
Sections
.text Size: 209KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ