Static task
static1
Behavioral task
behavioral1
Sample
6857ce843f89d3e569a3d2d4befaaf3c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6857ce843f89d3e569a3d2d4befaaf3c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6857ce843f89d3e569a3d2d4befaaf3c_JaffaCakes118
-
Size
1.3MB
-
MD5
6857ce843f89d3e569a3d2d4befaaf3c
-
SHA1
a4c3c6bc77e84f4def3cfbc032d4cb2c3f2f3f5d
-
SHA256
c42c4148f67394ea6d133afcb7ae871c2277e98a45929b700cb582b7f9c85d38
-
SHA512
4ca45474be741ba467dad454554ffe618e7789862a23c14f7c991303a74d9c183c7d92294276031e34112312a8c3e58d1f3470d12b650967c84b11106ce64dc9
-
SSDEEP
24576:5mOr9ruwrvKGJgD3NbBNVlLzss15P0QRQudBQHzm9mO7PphA10ewh02/:4OZrbrvvGbNV2Ut5/7Amx02/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6857ce843f89d3e569a3d2d4befaaf3c_JaffaCakes118
Files
-
6857ce843f89d3e569a3d2d4befaaf3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
fa6a819e14f0b07b0cb426e747d87c75
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GlobalDeleteAtom
GetFileSize
GetDateFormatA
Sleep
GetEnvironmentStrings
GetStdHandle
CloseHandle
GetUserDefaultLCID
lstrlenA
GetOEMCP
lstrcmpiA
RaiseException
LockResource
SetThreadLocale
VirtualFree
FreeLibrary
SetEndOfFile
CreateEventA
GetStringTypeW
LocalFree
GetCurrentProcess
ExitProcess
CompareStringA
GetLocalTime
GetLocaleInfoA
MulDiv
GetThreadLocale
LocalAlloc
GetLastError
EnumCalendarInfoA
GetACP
WideCharToMultiByte
FreeResource
VirtualAlloc
InitializeCriticalSection
SetErrorMode
FindResourceA
GetTickCount
HeapAlloc
SetEvent
LoadLibraryA
GetCurrentThreadId
user32
EndDeferWindowPos
DrawFrameControl
ClientToScreen
GetClientRect
GetIconInfo
BeginDeferWindowPos
ShowScrollBar
DefWindowProcA
GetWindow
GetDlgItem
DrawTextA
EnableMenuItem
DrawIconEx
SetWindowLongA
CreateMenu
GetMenuStringA
GetPropA
SystemParametersInfoA
EnumWindows
GetSysColor
EnableWindow
DrawEdge
GetDC
CreateIcon
EqualRect
GetMenuItemCount
EnumChildWindows
ShowWindow
SetWindowTextA
EndPaint
DrawMenuBar
IsDialogMessageA
GetWindowTextA
GetClassInfoA
FindWindowA
GetMessagePos
GetScrollRange
CharLowerA
CallWindowProcA
IsChild
GetActiveWindow
GetMenuItemID
CheckMenuItem
CreatePopupMenu
DispatchMessageA
CharLowerBuffA
GetMenu
DrawIcon
DeferWindowPos
GetKeyNameTextA
GetCursor
RegisterClassA
DispatchMessageW
GetSubMenu
EnableScrollBar
DefMDIChildProcA
MessageBoxA
GetScrollInfo
GetForegroundWindow
GetLastActivePopup
GetCapture
DefFrameProcA
CreateWindowExA
Sections
TLS Size: 45KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 653KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 161KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 405KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CODE Size: 512B - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.init Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ