Static task
static1
Behavioral task
behavioral1
Sample
6adeb1a43b493cd250e55d2e0ac97429_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6adeb1a43b493cd250e55d2e0ac97429_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6adeb1a43b493cd250e55d2e0ac97429_JaffaCakes118
-
Size
154KB
-
MD5
6adeb1a43b493cd250e55d2e0ac97429
-
SHA1
0e6c5024e7f1bcc413073f703452479187431bb7
-
SHA256
3f4569c6831b9bb8453e37dc6dfe0ba219065e135d6a917a744286cac13d6b8d
-
SHA512
9a0bb19decfa7c938700c093dbde587812493324dc25727babd6e9b7f51f9ebc36500da9cde1d0cec2b3e6969a72a49eac8de4e12ff18d60a061578d1707a7da
-
SSDEEP
3072:4KxqrRiZMALaNiGG/qcT+fpcHjouGQ/JseIbc8AI9TbX:TLvcB4TTiSUuGQ/Jslc8T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6adeb1a43b493cd250e55d2e0ac97429_JaffaCakes118
Files
-
6adeb1a43b493cd250e55d2e0ac97429_JaffaCakes118.exe windows:4 windows x86 arch:x86
3347fa562b476cd85b17d95c296463d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateFileMappingA
CreateFileW
CreateMutexA
CreateThread
DeleteFileW
EnumCalendarInfoA
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeResource
GetConsoleMode
GetDiskFreeSpaceA
GetDriveTypeA
GetEnvironmentVariableA
GetExitCodeProcess
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetOEMCP
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemTime
GetTickCount
GetUserDefaultLangID
GetVersion
GetVersionExA
GlobalAlloc
GlobalDeleteAtom
GlobalReAlloc
HeapAlloc
HeapCreate
HeapReAlloc
InterlockedCompareExchange
InterlockedExchange
IsBadReadPtr
IsBadWritePtr
IsDBCSLeadByte
IsValidCodePage
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LocalFileTimeToFileTime
LockResource
MoveFileA
MulDiv
OpenProcess
OutputDebugStringA
RemoveDirectoryA
ResetEvent
SetCurrentDirectoryA
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesA
SetFileTime
SetLastError
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
UnmapViewOfFile
VirtualAlloc
VirtualQuery
WideCharToMultiByte
WriteConsoleA
lstrcmpiA
lstrlenA
lstrlenW
user32
AdjustWindowRectEx
ClientToScreen
CloseClipboard
DeleteMenu
DestroyCursor
DestroyMenu
DispatchMessageA
DrawIcon
DrawMenuBar
EmptyClipboard
EnumThreadWindows
EqualRect
FrameRect
GetClassNameA
GetClientRect
GetDCEx
GetDlgItem
GetFocus
GetForegroundWindow
GetKeyboardType
GetMenuItemID
GetMessageA
GetMessagePos
GetScrollRange
GetSysColor
GetSysColorBrush
GetWindowLongA
GetWindowThreadProcessId
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
IsChild
IsRectEmpty
IsWindowEnabled
IsWindowVisible
IsZoomed
LoadIconA
MapWindowPoints
MessageBoxA
OemToCharA
OffsetRect
OpenClipboard
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
RemoveMenu
SendMessageA
SetCapture
SetClipboardData
SetFocus
SetForegroundWindow
SetPropA
SetScrollInfo
SetScrollRange
SetWindowLongA
SetWindowPos
SetWindowsHookExA
ShowCursor
ShowWindow
SystemParametersInfoA
WaitMessage
WinHelpA
WindowFromPoint
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ