Static task
static1
Behavioral task
behavioral1
Sample
6704b7bf972c68c9acd139d162e62de3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6704b7bf972c68c9acd139d162e62de3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6704b7bf972c68c9acd139d162e62de3_JaffaCakes118
-
Size
2.5MB
-
MD5
6704b7bf972c68c9acd139d162e62de3
-
SHA1
325b5fa5965a57fc9386ba587e75decf32ec24ac
-
SHA256
413dd56e482d48d07e7ebe95e2ca14ed71115760fd41bf703cc61aeccb35fbdf
-
SHA512
611fe041e88bb287629f6937925ee2b5e468a2e1946bbdd6d561d6018321a9ef7ff6d056b77d0d151e42dcb3d6f068d4e47dde4a2efa2d7bf415ed19cf3aa4d5
-
SSDEEP
49152:Mp2ZPO15yn1g3xzUp/jwtV8+zGqOwS9/hwS8LRr/vlh4qpzIe/I7s2p:MpW21cg3xzUp0r8+z0k5rY8zIuIB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6704b7bf972c68c9acd139d162e62de3_JaffaCakes118
Files
-
6704b7bf972c68c9acd139d162e62de3_JaffaCakes118.exe windows:4 windows x86 arch:x86
51f6b571a2c529c61d297e6189c4eccb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetFileSize
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
TerminateProcess
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
UnlockFile
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetDriveTypeA
GetDiskFreeSpaceA
CreateDirectoryA
MapViewOfFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetCurrentDirectoryA
CreateFileMappingA
UnmapViewOfFile
QueryPerformanceCounter
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetProcessVersion
LoadLibraryA
FreeLibrary
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
SetVolumeLabelA
GetCurrentThreadId
CloseHandle
GetVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalAlloc
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpynA
GetLastError
SetLastError
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
ExitProcess
GetFileAttributesA
SetFileAttributesA
GetModuleFileNameA
GetWindowsDirectoryA
GetTempPathA
GetSystemDirectoryA
FreeEnvironmentStringsA
SetCurrentDirectoryA
user32
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
CharUpperA
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyState
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
LoadStringA
OemToCharBuffA
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
DestroyWindow
SetDlgItemTextA
GetDlgItemTextA
ShowWindow
MessageBoxIndirectA
LoadIconA
SetClassLongA
GetClientRect
CopyRect
MessageBoxA
GetDlgItem
EnableWindow
EndDialog
DialogBoxParamA
SendMessageA
GetParent
GetMenuCheckMarkDimensions
CharToOemBuffA
gdi32
SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RestoreDC
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
shell32
SHBrowseForFolderA
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteA
comctl32
ord17
comdlg32
GetFileTitleA
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ