Static task
static1
Behavioral task
behavioral1
Sample
6ff0e8fbe29dd9f4529fc053c4da9847_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6ff0e8fbe29dd9f4529fc053c4da9847_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6ff0e8fbe29dd9f4529fc053c4da9847_JaffaCakes118
-
Size
576KB
-
MD5
6ff0e8fbe29dd9f4529fc053c4da9847
-
SHA1
6113224ea3d044b91bcaaeaf552bd03df9ce2b1d
-
SHA256
f432e8aa2081bb6e4ac9ab3de4ba84e345e006b9dd41b7a9897816fd78db6a2c
-
SHA512
e2c2a75f62f5486c14fe2ac6a7d89151c33a35310e05d553adf6696760e8e6d5f944efda5fec8f48c66251b7d7659a2634d8a47e25b3cb018370c8dd594fd136
-
SSDEEP
12288:xBcTOwm7n3u2bNdM4EHa6q5wHSUY7la1A:Rwmje2bNdM45zJ7laK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6ff0e8fbe29dd9f4529fc053c4da9847_JaffaCakes118
Files
-
6ff0e8fbe29dd9f4529fc053c4da9847_JaffaCakes118.exe windows:4 windows x86 arch:x86
d8c3cf70f6dd98cc04802631fd8abe98
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetThreadLocale
HeapCreate
GetStringTypeA
GetCurrentThread
SetComputerNameA
EnumResourceLanguagesW
ReadConsoleOutputA
GetConsoleTitleW
MultiByteToWideChar
UnhandledExceptionFilter
IsBadWritePtr
GetVersionExA
WritePrivateProfileSectionW
GetLastError
GetPrivateProfileStringW
EnumCalendarInfoExA
WaitForDebugEvent
GetCurrentProcessId
CompareStringA
DeleteCriticalSection
FlushFileBuffers
VirtualProtect
InterlockedIncrement
InterlockedExchangeAdd
FreeEnvironmentStringsA
GetTimeZoneInformation
HeapReAlloc
SetStdHandle
GetModuleHandleA
OpenMutexA
EnumSystemLocalesA
WaitForMultipleObjects
HeapFree
GetComputerNameA
FindResourceExW
GetStringTypeW
FileTimeToSystemTime
LoadLibraryExA
GlobalLock
HeapSize
VirtualQuery
QueryPerformanceCounter
CloseHandle
GetCommandLineA
GetPrivateProfileStringA
WriteFile
TlsSetValue
WriteConsoleA
GetStartupInfoA
SetTimeZoneInformation
LeaveCriticalSection
IsValidCodePage
lstrcatW
TlsGetValue
SetConsoleCP
GetCurrentThreadId
SetLastError
GetTimeFormatA
TlsFree
GetPrivateProfileSectionA
ExpandEnvironmentStringsW
GetCurrentProcess
GetCurrentDirectoryW
CreateProcessW
VirtualFree
GetPriorityClass
ExitProcess
RtlUnwind
VirtualAlloc
FreeLibrary
ReadFile
SetFilePointer
GetTickCount
CreateMutexA
OpenWaitableTimerW
OpenWaitableTimerA
GetLocaleInfoA
GetStdHandle
CreateMutexW
ReleaseMutex
HeapValidate
InterlockedExchange
HeapDestroy
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
HeapAlloc
GetStartupInfoW
GetProcAddress
WriteConsoleOutputW
lstrcmpA
CreateRemoteThread
lstrcpynW
GetOEMCP
GetLocaleInfoW
GetEnvironmentStringsW
GetAtomNameW
FindClose
InitializeCriticalSection
SetEnvironmentVariableA
GetCommandLineW
GetDateFormatA
SetHandleCount
WriteConsoleOutputA
SetLocaleInfoA
LoadLibraryA
TlsAlloc
lstrcmpiA
IsValidLocale
GetCPInfo
CreateFileW
GetACP
GetSystemInfo
WideCharToMultiByte
WaitForSingleObjectEx
GetLogicalDrives
ReadConsoleA
GetEnvironmentStrings
WritePrivateProfileStringW
lstrlenW
GetFileType
GetPrivateProfileIntW
GetUserDefaultLCID
LCMapStringW
LCMapStringA
SetConsoleOutputCP
CompareStringW
EnterCriticalSection
WaitForMultipleObjectsEx
TerminateProcess
OpenSemaphoreA
GetModuleFileNameW
user32
DdeInitializeW
RegisterClassA
IsWindowEnabled
SetKeyboardState
GetPriorityClipboardFormat
GetGUIThreadInfo
RemovePropW
GetWindowDC
DrawEdge
DefDlgProcA
RegisterClassExA
GetClassInfoExA
ValidateRect
CreateMDIWindowA
DefWindowProcW
CharToOemBuffW
GetForegroundWindow
GetMessagePos
IsCharAlphaW
CreateWindowStationA
GetWindowTextW
shell32
ExtractAssociatedIconW
DragQueryFileA
comctl32
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_GetImageRect
InitMUILanguage
MakeDragList
ImageList_BeginDrag
ImageList_GetIcon
ImageList_SetFlags
ImageList_SetBkColor
DrawStatusText
ImageList_DragLeave
InitCommonControlsEx
ImageList_DragMove
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ