Static task
static1
Behavioral task
behavioral1
Sample
6f9c002e8b122e90b920991240f5941c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f9c002e8b122e90b920991240f5941c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f9c002e8b122e90b920991240f5941c_JaffaCakes118
-
Size
164KB
-
MD5
6f9c002e8b122e90b920991240f5941c
-
SHA1
de8358f512c9270413aafb16316e21248260d020
-
SHA256
93038c97d902b6e7357e74e95a1932691f62816c542e48bd2e638f0139f1955e
-
SHA512
fca82a0527992b6cd1e15aaaf245d86dc9b0d5074e741715e8dfc0d041c646ba00a09f0e061463a0706f0c7ad2eef64fcbb3861c5fadb1de4faf7dff10b52989
-
SSDEEP
1536:S37yv6RxG9bD4VDG1zdrX9p38idm5oao4D:SryOxG5DTrrX9lo5oaow
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f9c002e8b122e90b920991240f5941c_JaffaCakes118
Files
-
6f9c002e8b122e90b920991240f5941c_JaffaCakes118.exe windows:4 windows x86 arch:x86
690cf97eb58ae1a491da031d507b73d3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
VirtualAlloc
HeapReAlloc
HeapAlloc
SetFilePointer
GetLastError
RtlUnwind
VirtualFree
HeapFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
LoadLibraryA
GetProcAddress
SetConsoleCtrlHandler
FreeLibrary
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
CloseHandle
user32
CallNextHookEx
SendMessageA
SetWindowsHookExA
EndDialog
SetTimer
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
GetClientRect
DrawTextA
EndPaint
KillTimer
PostQuitMessage
FindWindowA
GetForegroundWindow
FindWindowExA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyExA
Sections
.text Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ