Static task
static1
Behavioral task
behavioral1
Sample
63e24afe786f8af8de5681c3991fa726_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63e24afe786f8af8de5681c3991fa726_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63e24afe786f8af8de5681c3991fa726_JaffaCakes118
-
Size
376KB
-
MD5
63e24afe786f8af8de5681c3991fa726
-
SHA1
2fefd9271c2accbd86828caf49daf0122799c5e2
-
SHA256
f2c40e3c604e028058eab7c9ba026e1dd61d2878d1f2a42c9175db8e8a555c81
-
SHA512
f457c66e0f8c60e5db3a74ec27b56d1f8a253d8bc492d672aef7ea5ec51aa531b9f3f271e70a984d22f90d95aa3b555c91737bac51f5ccd3b664b8cfdf63f6ee
-
SSDEEP
6144:XGQq8ASbGDJaWxO3v6gl84IqnoNcURFt3GC/7DujYWvmHchL8KzPDE+I+SoBH+Lq:Xq1uGvOCgObcURH3GC/H8UHcV8K7DU+x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63e24afe786f8af8de5681c3991fa726_JaffaCakes118
Files
-
63e24afe786f8af8de5681c3991fa726_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a9f5341d740c51daa48a4d9831275b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
IsValidCodePage
CreateProcessA
SizeofResource
GetCurrentThreadId
GetACP
lstrcpynA
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
Sleep
HeapSize
GetCurrentDirectoryA
LockResource
GetCurrentProcessId
GetEnvironmentStrings
lstrlenW
GlobalAlloc
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
DuplicateHandle
FindFirstFileW
CreateFileMappingA
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
GetCPInfo
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
VirtualFree
InterlockedIncrement
GetVersion
SetEndOfFile
VirtualQuery
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
SetEvent
GetStringTypeW
HeapReAlloc
GetCommandLineA
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
GetTempPathA
SetStdHandle
GetLocaleInfoW
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
HeapDestroy
GetDriveTypeA
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetStdHandle
TlsSetValue
TlsGetValue
GetEnvironmentVariableA
RtlUnwind
VirtualAlloc
WriteConsoleW
GetOEMCP
oleaut32
SysAllocStringLen
SysStringLen
VariantClear
SysFreeString
advapi32
OpenProcessToken
RegCloseKey
user32
SetCursor
GetFocus
GetClientRect
InvalidateRect
SystemParametersInfoA
SetDlgItemTextA
SetForegroundWindow
GetDesktopWindow
LoadCursorA
ScreenToClient
SetWindowTextA
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
BeginPaint
PeekMessageA
SetFocus
EndPaint
DispatchMessageA
EnableMenuItem
IsWindowEnabled
ReleaseDC
ShowWindow
DefWindowProcA
UpdateWindow
GetMessageA
DestroyWindow
UnregisterClassA
GetCursorPos
GetDC
IsWindow
LoadBitmapA
PostQuitMessage
DestroyMenu
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 340KB - Virtual size: 338KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ