Static task
static1
Behavioral task
behavioral1
Sample
69d16d14ee912ae0254fbaf47d300a28_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
69d16d14ee912ae0254fbaf47d300a28_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
69d16d14ee912ae0254fbaf47d300a28_JaffaCakes118
-
Size
444KB
-
MD5
69d16d14ee912ae0254fbaf47d300a28
-
SHA1
cdd1e47a7fef85d950307644bc5f0bbe357a1022
-
SHA256
fa9b52e2139f544222695616a8933c952f651cd0e1a07679c36c86bdc71c31c5
-
SHA512
aa1251d5541ab29e5f11d48d0f4f08822a6108f4c00c096139e74e6c4af9debcee6f34df1b037b0bc00844f1f066936cf144db1e0046207ae9bd812e3585f6ef
-
SSDEEP
12288:NnnRPPU0f+alwa318aWHpcs8cDcqSAZbSmT1q8c+cK8:hnf3aa6cs3emTM+R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69d16d14ee912ae0254fbaf47d300a28_JaffaCakes118
Files
-
69d16d14ee912ae0254fbaf47d300a28_JaffaCakes118.exe windows:4 windows x86 arch:x86
c3bd45bddb31b2c6f74705c2977d95bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetConnectedStateExA
InternetSecurityProtocolToStringA
FtpGetCurrentDirectoryW
LoadUrlCacheContent
UnlockUrlCacheEntryStream
CreateUrlCacheGroup
FtpFindFirstFileA
IsUrlCacheEntryExpiredW
SetUrlCacheConfigInfoA
FtpGetFileEx
FtpRenameFileW
InternetFindNextFileA
InternetGoOnlineW
SetUrlCacheConfigInfoW
SetUrlCacheGroupAttributeA
user32
AdjustWindowRectEx
ToAscii
SetClipboardViewer
CreateMDIWindowA
DdeCreateStringHandleW
SetSystemCursor
DlgDirListComboBoxW
CascadeChildWindows
GetTabbedTextExtentA
GetCaretPos
FlashWindow
DdeUninitialize
GetClipboardFormatNameA
comdlg32
ReplaceTextW
PageSetupDlgW
GetOpenFileNameW
PrintDlgA
PrintDlgW
ChooseColorA
LoadAlterBitmap
GetOpenFileNameA
FindTextA
ChooseFontW
GetSaveFileNameA
GetSaveFileNameW
ChooseFontA
ChooseColorW
ReplaceTextA
gdi32
ResetDCA
GetEnhMetaFileA
CheckColorsInGamut
CreatePenIndirect
GdiPlayScript
SetPaletteEntries
gdiPlaySpoolStream
SetBitmapBits
CreateDCA
CreateBitmap
GetTextMetricsA
kernel32
GetStdHandle
GetStartupInfoA
TlsSetValue
ReleaseSemaphore
RtlUnwind
SetConsoleWindowInfo
CompareStringA
GetLocaleInfoA
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
GetEnvironmentStringsW
MultiByteToWideChar
VirtualAlloc
OpenWaitableTimerW
GetProcAddress
GetProcessHeap
VirtualFree
TerminateProcess
IsValidLocale
GetCurrentProcess
GlobalUnlock
SetLastError
GetLastError
GetVersionExA
ExitProcess
SetCurrentDirectoryA
GetCommandLineW
SetUnhandledExceptionFilter
QueryPerformanceCounter
CompareStringW
HeapDestroy
TlsFree
InitializeCriticalSection
GetDateFormatA
RaiseException
GetStartupInfoW
InterlockedDecrement
GetOEMCP
TlsGetValue
GetCPInfo
SuspendThread
GetCommandLineA
FreeEnvironmentStringsW
GetFileType
HeapCreate
HeapFree
GetTimeFormatW
SetEnvironmentVariableA
GetTimeFormatA
WriteFile
GetCurrentProcessId
GetTimeZoneInformation
TlsAlloc
GetEnvironmentStrings
HeapSize
EnumSystemLocalesA
LeaveCriticalSection
OpenSemaphoreW
LCMapStringW
GetACP
IsValidCodePage
GlobalFlags
Sleep
GetSystemTimeAsFileTime
EnterCriticalSection
GetModuleFileNameW
HeapAlloc
GetLocaleInfoW
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
ReadConsoleA
GetStringTypeW
GetCurrentThread
GetUserDefaultLCID
GetCurrentThreadId
GlobalSize
HeapReAlloc
FreeLibrary
SetHandleCount
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetTickCount
GetModuleHandleA
GetAtomNameW
CreateThread
VirtualQuery
LCMapStringA
FillConsoleOutputAttribute
SetConsoleCtrlHandler
DeleteCriticalSection
IsDebuggerPresent
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ