Static task
static1
Behavioral task
behavioral1
Sample
6a8a72de00c8a10d9df2b05e33fdb8d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6a8a72de00c8a10d9df2b05e33fdb8d9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6a8a72de00c8a10d9df2b05e33fdb8d9_JaffaCakes118
-
Size
217KB
-
MD5
6a8a72de00c8a10d9df2b05e33fdb8d9
-
SHA1
2f4bf58d6394ad126d6ee4c87588c8d14af48c44
-
SHA256
1b9aa685e03bab7d62676d7bea3bb526a88e71c847a340b9377334c196293ea1
-
SHA512
2e753bd6052ddec61267be310e1b69598bf9161044d79fb2e57de9bc4887405064cc5aece8b19e8f31fe5c5b59f85787cc7fc1188999b64f9c1630eb0e10b9f5
-
SSDEEP
3072:qHjpvxRXCXAF9y9c8AC/R7HndC/RYr4+iQvs:4lf8AFM/R7Hs/RYr4+iU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a8a72de00c8a10d9df2b05e33fdb8d9_JaffaCakes118
Files
-
6a8a72de00c8a10d9df2b05e33fdb8d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
a3f0caf3eb24fecfb2024929cfd95c95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendDlgItemMessageA
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassExA
PostQuitMessage
OpenClipboard
MessageBoxA
LockWindowUpdate
LoadIconA
LoadCursorA
LoadBitmapA
LoadAcceleratorsA
KillTimer
InvalidateRect
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetSysColor
GetSubMenu
GetParent
GetMessageA
GetMenu
GetFocus
GetDlgItemTextA
GetDlgItem
GetDlgCtrlID
GetDC
SendMessageA
GetClipboardData
GetClientRect
EnumChildWindows
EndPaint
EndDialog
EnableWindow
EnableMenuItem
DrawTextA
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
CreateDialogParamA
CloseClipboard
SetTimer
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowTextA
ShowWindow
TrackPopupMenu
TranslateAcceleratorA
TranslateMessage
BeginPaint
CallWindowProcA
ChildWindowFromPoint
UpdateWindow
SetCapture
SetLayeredWindowAttributes
GetCursorPos
SetFocus
SetCursor
wsprintfA
kernel32
LockResource
MulDiv
SizeofResource
CancelIo
CloseHandle
LoadResource
FindResourceA
SetLastError
MultiByteToWideChar
lstrlenA
lstrcpyA
lstrcmpiA
lstrcmpA
lstrcatA
WriteFile
WaitForSingleObject
Sleep
SetFilePointer
SetCurrentDirectoryA
ResetEvent
ReadFile
OpenMutexA
GlobalFree
GlobalAlloc
GetVolumeInformationA
GetTimeFormatA
GetTickCount
GetOverlappedResult
GetModuleHandleA
GetModuleFileNameA
GetLogicalDriveStringsA
GetLastError
GetFileSize
GetDriveTypeA
GetDateFormatA
GetCurrentDirectoryA
GetCommandLineA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
DeviceIoControl
DeleteFileA
CreateThread
CreateMutexA
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
shell32
SHGetFileInfoA
DragQueryFileA
ShellExecuteA
comctl32
_TrackMouseEvent
InitCommonControls
ImageList_LoadImageA
ImageList_Draw
ImageList_Create
ImageList_AddIcon
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
gdi32
CreateFontIndirectA
CreatePatternBrush
CreatePen
DeleteObject
ExtTextOutA
GetStockObject
LineTo
MoveToEx
SelectObject
SetBkColor
SetBkMode
SetTextColor
TextOutA
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
GetDeviceCaps
ole32
CoInitialize
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
oleaut32
OleLoadPicture
OleLoadPicturePath
wininet
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 62KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE