Static task
static1
Behavioral task
behavioral1
Sample
6adb3b7b2df86ec84fcb7928c7c5ad51_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6adb3b7b2df86ec84fcb7928c7c5ad51_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6adb3b7b2df86ec84fcb7928c7c5ad51_JaffaCakes118
-
Size
547KB
-
MD5
6adb3b7b2df86ec84fcb7928c7c5ad51
-
SHA1
d6a2234d58f272c45f419e2ac7707515348acea6
-
SHA256
4454f3fe8ae9ef83cd5d778ccf10bc105b92ca59e13fbd2ba57a47a54b4839cd
-
SHA512
09263344d1bcf2b1abe62dcdfa9f98008e5dc291142c7a56c5ff152e4bd514b5929e3a667756436876c91d1f8086279ad585b2338d892939a88ba14bb7f9333b
-
SSDEEP
12288:XSFfsfa6mK7KD4gj8YwnnlCRy69Q34vc5FKeBCg4nX7Q3:X+54gj8Y8nlCx8F/BqrQ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6adb3b7b2df86ec84fcb7928c7c5ad51_JaffaCakes118
Files
-
6adb3b7b2df86ec84fcb7928c7c5ad51_JaffaCakes118.exe windows:5 windows x86 arch:x86
4d0f477252f28c6800cd40defa17b512
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndPaint
GetDC
ReleaseDC
GetClientRect
GetParent
UpdateWindow
ShowWindow
EnableWindow
PeekMessageA
TranslateMessage
IsWindowEnabled
GetWindow
GetWindowLongA
CreateWindowExA
FillRect
DefWindowProcA
GetSystemMetrics
GetWindowRect
SetCapture
ReleaseCapture
SetWindowLongA
GetDlgItem
ScreenToClient
LoadCursorA
GetDesktopWindow
MessageBoxA
InvalidateRect
CallWindowProcA
SetCursor
kernel32
GetOEMCP
RtlUnwind
GetEnvironmentVariableA
TlsGetValue
GetVersion
GetStartupInfoA
VirtualAlloc
Sleep
VirtualFree
WriteFile
HeapCreate
WideCharToMultiByte
CreateProcessA
GetEnvironmentStrings
GetModuleHandleW
GetACP
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
GetCurrentDirectoryA
LockResource
GetCurrentProcessId
SizeofResource
CreateProcessW
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GlobalFree
lstrlenA
GetSystemInfo
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
TlsSetValue
GetFileType
CreateEventA
GlobalLock
FindFirstFileW
FindNextFileW
GetProcAddress
DeleteFileW
DeleteFileA
GetFileSize
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
SetHandleCount
EnterCriticalSection
HeapFree
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
WriteConsoleA
TerminateProcess
SetUnhandledExceptionFilter
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
SetLastError
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
SetEvent
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeA
GetCPInfo
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetCurrentProcess
FreeEnvironmentStringsA
GetExitCodeProcess
HeapDestroy
WaitForSingleObject
GetFileAttributesA
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetModuleHandleA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 522KB - Virtual size: 522KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ