Static task
static1
Behavioral task
behavioral1
Sample
676f2ea60352ab448ebecbb574c1745b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
676f2ea60352ab448ebecbb574c1745b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
676f2ea60352ab448ebecbb574c1745b_JaffaCakes118
-
Size
155KB
-
MD5
676f2ea60352ab448ebecbb574c1745b
-
SHA1
840a146fc8fb19079fe28e8f6b6866eee5506df2
-
SHA256
40f29f914a11a28beafb0478e2a05ca55cdc323695b57d6e252fc2df2198c50b
-
SHA512
98663a808eface6b95871303056a7b75a9e18526a6bd24c738700f88f5feb7c10c1c92886bf2d279d69bf96db6ab4709a9be9d27c0a14b403a9f7b121ba8b474
-
SSDEEP
768:zXtuCNba87ebyOqAILhDBtEhd0Iovoyk:zXj48vOUrtEhey
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 676f2ea60352ab448ebecbb574c1745b_JaffaCakes118
Files
-
676f2ea60352ab448ebecbb574c1745b_JaffaCakes118.exe windows:4 windows x86 arch:x86
c3dabbbfd7dc35ce87d6eae020a19f8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowExA
FindWindowA
ExitWindowsEx
DispatchMessageA
DefWindowProcA
CreateWindowExA
TranslateMessage
SetTimer
SetForegroundWindow
ReleaseDC
RegisterClassExA
PostQuitMessage
PostMessageA
LoadIconA
LoadCursorA
KillTimer
IsWindow
GetWindowThreadProcessId
GetMessageA
GetDC
wsprintfA
kernel32
CreateProcessA
DeleteFileA
ExitProcess
GetCurrentProcess
GetModuleFileNameA
GetStartupInfoA
GetSystemDirectoryA
CreateFileA
GetTempPathA
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
MultiByteToWideChar
OpenProcess
SetEndOfFile
SetFilePointer
Sleep
TerminateProcess
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
CloseHandle
GetFileSize
ReadFile
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
advapi32
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
wininet
InternetReadFile
InternetQueryDataAvailable
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
InternetConnectA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
DeleteUrlCacheEntryA
urlmon
URLDownloadToFileA
gdi32
StretchBlt
SelectObject
TextOutA
GetTextExtentPoint32A
GetObjectA
GetDIBits
DeleteObject
DeleteDC
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
CreateDIBSection
PatBlt
CreateDIBitmap
ole32
CoCreateInstance
OleUninitialize
OleInitialize
oleaut32
SysAllocString
SysFreeString
VariantInit
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE