Static task
static1
Behavioral task
behavioral1
Sample
699a2bdec1841c5cea4e72b0ab74ec11_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
699a2bdec1841c5cea4e72b0ab74ec11_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
699a2bdec1841c5cea4e72b0ab74ec11_JaffaCakes118
-
Size
174KB
-
MD5
699a2bdec1841c5cea4e72b0ab74ec11
-
SHA1
510af86ffae27a1e12ffe8460bb929e54445feb6
-
SHA256
0f1f2dc863fa0e5a756b6859c51ebeb4aa95874fa804b54a7908d569dcc780b8
-
SHA512
09caebbd9800b4da4c8dabc637781fab543c2e0381b9676705581b9ace83c93ff32f17436b1d2d35ddf5c39caf1a72019a64864ad65798a7bec3f521c7d5ec5d
-
SSDEEP
3072:2nz8BvA6HaggAbKvlf7Hwk2bPNkuSbzwslvvSjdDeJvIT9cHV2warOIIZMjd:gzkZmjf7Hwk2LxvjqQmHV2wZKj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 699a2bdec1841c5cea4e72b0ab74ec11_JaffaCakes118
Files
-
699a2bdec1841c5cea4e72b0ab74ec11_JaffaCakes118.exe windows:4 windows x86 arch:x86
653aba4558ffc4e69ee4d9eccafcf792
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
user32
DestroyWindow
RegisterClassExW
DispatchMessageW
GetWindowTextLengthW
SetDlgItemTextW
GetDlgItemTextW
GetParent
BeginPaint
SetWindowTextW
GetClassInfoExW
SetWindowPos
CreateWindowExW
GetClientRect
PeekMessageW
EndPaint
TranslateMessage
SetCapture
GetWindowInfo
GetDC
MapWindowPoints
GetWindow
LoadCursorW
MessageBoxW
SystemParametersInfoW
GetDlgItem
GetWindowRect
EndDialog
kernel32
CreateSemaphoreW
FreeLibrary
GetProcAddress
TlsSetValue
GetCurrentProcessId
RtlUnwind
GetCommandLineW
MulDiv
QueryPerformanceCounter
TlsGetValue
InterlockedExchange
GetVersionExA
TlsAlloc
WriteConsoleInputVDMA
GetCurrentThreadId
LoadLibraryExW
GetOEMCP
HeapSize
GetConsoleMode
VirtualAlloc
CopyFileW
GetCurrentProcess
SetLastError
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetFileSize
WriteConsoleW
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
CreateFileMappingW
GetLocaleInfoA
TlsFree
GetProcessHandleCount
GetVersion
LocalAlloc
CreateFileW
GetEnvironmentStrings
GetModuleFileNameA
WideCharToMultiByte
lstrlenA
FindResourceW
UnhandledExceptionFilter
LoadLibraryW
SetStdHandle
EnumResourceNamesA
GetLastError
lstrcmpA
GetModuleFileNameW
SizeofResource
GetVersionExW
InterlockedIncrement
SetFilePointer
GetEnvironmentStringsW
GetStartupInfoW
GetConsoleOutputCP
FlushFileBuffers
Sleep
GetSystemDirectoryW
GetCPInfo
GetFileAttributesW
GetStringTypeW
ExitProcess
IsDebuggerPresent
GetTickCount
GetStdHandle
LoadLibraryA
GetProcessHeap
lstrcmpiW
FreeEnvironmentStringsW
CreateFileA
ReadFile
LoadResource
GetThreadLocale
IsProcessorFeaturePresent
GetDriveTypeW
GetModuleHandleA
HeapAlloc
HeapDestroy
HeapFree
RaiseException
SetHandleCount
FreeEnvironmentStringsA
LCMapStringW
FlushInstructionCache
GetFileType
LocalFree
GetStringTypeA
WriteFile
LCMapStringA
InterlockedCompareExchange
VirtualFree
GetStartupInfoA
HeapReAlloc
GetModuleHandleW
WriteConsoleA
WritePrivateProfileSectionW
WaitForSingleObject
CreateProcessW
HeapCreate
GetCommandLineA
InitializeCriticalSection
GetACP
DeleteFileW
LockResource
InterlockedDecrement
GetConsoleCP
lstrlenW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ