Static task
static1
Behavioral task
behavioral1
Sample
63c2d5c69e7a01d5f1a0aeda7805cfcd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63c2d5c69e7a01d5f1a0aeda7805cfcd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63c2d5c69e7a01d5f1a0aeda7805cfcd_JaffaCakes118
-
Size
246KB
-
MD5
63c2d5c69e7a01d5f1a0aeda7805cfcd
-
SHA1
62970a2758ee11916e8146777afc9c62c8b664e7
-
SHA256
46bf4bdfff012172531262ccdebb96e43fd51a3859bf3769c5cb8279036ae718
-
SHA512
ee7384705030f58311dc8081c85060ac003cce45324ae82278eb8d5c250ca176ece6971c618ce4ae0d05653083367f54b8ae36616934183698d5c14e078b4410
-
SSDEEP
3072:D2A8PS4917wdKDnwy+kK32IFNHhhxcRVFcfqaHZPBI0Jkg2h:D2/99BqKDwypK7hTxycfRoh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63c2d5c69e7a01d5f1a0aeda7805cfcd_JaffaCakes118
Files
-
63c2d5c69e7a01d5f1a0aeda7805cfcd_JaffaCakes118.exe windows:4 windows x86 arch:x86
9f1c79677dc473820cd0a7ca7068717f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
GetFileAttributesA
GetLogicalDriveStringsA
GetLastError
GetModuleFileNameA
GetProfileIntA
GetSystemDefaultLCID
ReadFile
SetFilePointer
CreateFileA
FlushFileBuffers
GetVersionExA
GetProfileStringA
GetDriveTypeA
Sleep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FindClose
FindNextFileA
FindFirstFileA
FreeLibrary
SetThreadContext
GetThreadContext
ResumeThread
GetCommandLineA
DeviceIoControl
SetEnvironmentVariableA
GetEnvironmentVariableA
LoadLibraryExA
CreateEventA
VirtualAlloc
GetExitCodeProcess
CopyFileA
CompareStringW
RtlUnwind
GetVersion
GetLocaleInfoA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetEndOfFile
GetStdHandle
SetHandleCount
GetLocaleInfoW
VirtualFree
HeapReAlloc
WaitForSingleObject
CompareStringA
WriteFile
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetCurrentProcess
HeapFree
HeapAlloc
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
SetFileAttributesA
GetFileType
GetStartupInfoA
GetOEMCP
SetStdHandle
HeapDestroy
HeapCreate
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
user32
wvsprintfA
MessageBoxA
WaitForInputIdle
wsprintfA
CreateWindowExA
GetDesktopWindow
MsgWaitForMultipleObjects
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
RegisterClassA
GetKeyboardType
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegOpenKeyA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
Sections
.txt Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.txt2 Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 58KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ