Static task
static1
Behavioral task
behavioral1
Sample
6acd6f027e310767908157abe6de7b80_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6acd6f027e310767908157abe6de7b80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6acd6f027e310767908157abe6de7b80_JaffaCakes118
-
Size
176KB
-
MD5
6acd6f027e310767908157abe6de7b80
-
SHA1
e0957ee3996e75b7aa6ea89361db804c90d3f146
-
SHA256
b2c76ba7a2cbb1a8b607d068524731b7615f52d0dda15f069b4b65ce3f9351b8
-
SHA512
99a8b8987736d3fba917fb3be456e81094d206b0b0717fcfa43a7d395f258dea1db70997c08e10b21f0724a5c97fcf21c52db4ff0b5834871bdaee592060d98a
-
SSDEEP
3072:1DoTQ83WVRHFBx4M3zESR1ENf+6S7ORnpiWvHLtJWdQeeqnMRon5HVXw:1UTB3yRH2Mjze+wpikPeyyn55w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6acd6f027e310767908157abe6de7b80_JaffaCakes118
Files
-
6acd6f027e310767908157abe6de7b80_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8fa90fbb5905a767d28c1cd3bedb26f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZCopy
LZClose
LZOpenFileA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetModuleFileNameA
SetErrorMode
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
RaiseException
HeapAlloc
SetFileAttributesA
GetCPInfo
RtlUnwind
GetOEMCP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetLocaleInfoA
GetLocaleInfoW
SetStdHandle
CreateDirectoryA
GetFileAttributesA
CreateProcessA
GetExitCodeProcess
Sleep
CloseHandle
lstrcatA
GetWindowsDirectoryA
GetSystemDirectoryA
GetPrivateProfileSectionA
lstrlenA
GetPrivateProfileStringA
SetFilePointer
WriteFile
GetVersion
GetCurrentProcess
SetLastError
GetProcessVersion
GlobalFlags
lstrcpyA
LocalReAlloc
lstrcpynA
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
LocalFree
LocalAlloc
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
GetCurrentThread
GlobalDeleteAtom
lstrcmpA
InterlockedDecrement
GetCurrentThreadId
WideCharToMultiByte
LoadLibraryA
InterlockedIncrement
WritePrivateProfileSectionA
FreeLibrary
GetProcAddress
SetCurrentDirectoryA
GetVersionExA
MultiByteToWideChar
GetLastError
MoveFileExA
GetComputerNameA
OpenFile
DeleteFileA
WritePrivateProfileStringA
_lclose
CompareFileTime
CreateFileA
GetFileTime
GetTempPathA
lstrcmpiA
GetEnvironmentVariableA
UnhandledExceptionFilter
GetCurrentDirectoryA
FreeEnvironmentStringsA
HeapReAlloc
HeapSize
GetACP
user32
ShowWindow
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetDC
ReleaseDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
SetCursor
MessageBoxA
GetCursorPos
ValidateRect
GetMessageA
LoadStringA
GetClassNameA
PtInRect
ClientToScreen
LoadCursorA
GetSysColorBrush
DestroyMenu
SystemParametersInfoA
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
IsWindowVisible
ScreenToClient
SetWindowTextA
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
SetPropA
CallNextHookEx
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetNextDlgTabItem
EndDialog
GetActiveWindow
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
PostMessageA
PostQuitMessage
CharUpperA
wsprintfA
TranslateMessage
DispatchMessageA
PeekMessageA
EnableWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
LoadIconA
GetWindow
GetMessagePos
GetKeyState
WindowFromPoint
UnregisterClassA
gdi32
SelectObject
GetStockObject
RestoreDC
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetClipBox
SetWindowExtEx
CreateBitmap
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
SetTextColor
DeleteDC
SaveDC
winspool.drv
SetPrinterDataA
GetPrinterDriverDirectoryA
GetPrinterA
AddPrintProcessorA
EnumPrinterDriversA
DocumentPropertiesA
OpenPrinterA
ClosePrinter
AddPrinterDriverA
SetPrinterA
GetPrintProcessorDirectoryA
EnumPrintersA
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
shell32
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHChangeNotify
comctl32
ImageList_Destroy
ord17
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE