Static task
static1
Behavioral task
behavioral1
Sample
6a56e6a0842aa55840f275531750770e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6a56e6a0842aa55840f275531750770e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a56e6a0842aa55840f275531750770e_JaffaCakes118
-
Size
240KB
-
MD5
6a56e6a0842aa55840f275531750770e
-
SHA1
02ad29604073fff28b739b3f53fcd2d036c9a96f
-
SHA256
9a0c928e214dde335e42ed3d9e4edd6283c82288ecf81e738efd22f9143d0769
-
SHA512
d82a24e65f702e44973e0127241312b3329162264d97f3ae24e1297c2aed2653ec0cf7bcc94f49d51e10983a9c1a18d4c69ce6a6c0b7a6f601e3c648ae1ab4ea
-
SSDEEP
6144:KXYhK5+/lzRJ3B+Q8ZH/iV5UOLgTBJgZdN:nhDB+DZH/pOLgTrw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a56e6a0842aa55840f275531750770e_JaffaCakes118
Files
-
6a56e6a0842aa55840f275531750770e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f3ca52f7d34a3fd75968bb52f537f2d8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFindExtensionA
PathFindFileNameA
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueExA
kernel32
GetThreadLocale
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
WritePrivateProfileStringA
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
VirtualAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
ExitProcess
HeapSize
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetConsoleCP
GetConsoleMode
Sleep
GetACP
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
ReleaseSemaphore
CreateSemaphoreA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
WaitForSingleObject
GetCurrentThreadId
RaiseException
LocalAlloc
SetFilePointer
WriteFile
ReadFile
SetLastError
LocalFree
FreeLibrary
GetCurrentProcess
FindResourceA
LoadResource
LockResource
SizeofResource
LoadLibraryA
GetProcAddress
GetVersionExA
lstrlenA
CompareStringA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GetModuleFileNameA
CreateFileA
CloseHandle
GetLastError
GetSystemTimeAsFileTime
user32
BeginPaint
EndPaint
UnregisterClassA
DestroyMenu
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
UnhookWindowsHookEx
GetDesktopWindow
GetSystemMetrics
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
LoadCursorA
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
RegisterWindowMessageA
GetWindowThreadProcessId
GetParent
GetClassNameA
EnableWindow
GetWindowTextA
GetCursorPos
GetDC
ReleaseDC
GetSysColorBrush
AdjustWindowRectEx
ShowWindow
SetActiveWindow
gdi32
SetTextColor
GetClipBox
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
RectVisible
CreateBitmap
GetDeviceCaps
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
GetObjectA
SetBkColor
TextOutA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 148KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ