Static task
static1
Behavioral task
behavioral1
Sample
70430220573095ab3aa480975f9018a6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
70430220573095ab3aa480975f9018a6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
70430220573095ab3aa480975f9018a6_JaffaCakes118
-
Size
330KB
-
MD5
70430220573095ab3aa480975f9018a6
-
SHA1
869a7386fbb6bf4e58d95811f73b00841bc32028
-
SHA256
baca50c02efee180dd4c27a9eccf6be10f58fe3d55ca490a96aa8ea97a7ec593
-
SHA512
0538795ce2a2392d07ff427d83e6a90e24c341c536f890f635a685e25f682187843bb7495ec346153de8adba1566fbcc12db3751b520a03fa664f141fc91c52b
-
SSDEEP
6144:SrMiYNJADIe8XbEwx7e9wcNbR4CjuTBXl7wAORuO8AF89Vfw:ZikJAUXFM9wcN2TRl7w2d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70430220573095ab3aa480975f9018a6_JaffaCakes118
Files
-
70430220573095ab3aa480975f9018a6_JaffaCakes118.exe windows:4 windows x86 arch:x86
fbdf4b54d0a413666a9c949460ad3384
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetModuleHandleW
CopyFileExW
MoveFileExW
GetFileSizeEx
SetEndOfFile
GetQueuedCompletionStatus
ReadFile
SetFileApisToANSI
SetFilePointer
GetLongPathNameW
LockFileEx
SystemTimeToFileTime
PostQueuedCompletionStatus
GetSystemTime
FindClose
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FindFirstFileW
WriteFileGather
ReadFileEx
ReadFileScatter
GetFileSize
CreateFileA
CreateHardLinkW
LockFile
GetModuleFileNameA
FindNextFileW
SetFileValidData
MapViewOfFileEx
GetFileTime
GetFileInformationByHandle
CancelIo
GetTempFileNameW
GetShortPathNameW
UnlockFile
GetCompressedFileSizeW
FlushViewOfFile
SearchPathW
TerminateProcess
Sleep
GetTempPathW
FindFirstFileExW
GetFileAttributesW
GetProcAddress
LoadLibraryA
AreFileApisANSI
GetFileType
WinExec
DeleteFileW
SearchPathA
SetFileApisToOEM
GetShortPathNameA
DeleteFileA
GetSystemDirectoryW
WriteFileEx
ExitProcess
WideCharToMultiByte
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MultiByteToWideChar
GetLastError
CreateMutexW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
FlushFileBuffers
MapViewOfFile
UnmapViewOfFile
UnlockFileEx
GetTickCount
GetFileAttributesExW
CreateFileW
GetFullPathNameW
CopyFileW
CloseHandle
OpenFileMappingW
WriteFile
GetBinaryTypeW
CreateIoCompletionPort
SetFileAttributesW
SetFilePointerEx
MoveFileWithProgressW
SetFileShortNameW
ReplaceFileW
MoveFileW
CreateFileMappingW
SetFileTime
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
RaiseException
GetStartupInfoA
SetHandleCount
GetConsoleMode
GetConsoleCP
HeapSize
GetStdHandle
HeapAlloc
HeapFree
RtlUnwind
ExitThread
ResumeThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetProcessHeap
GetStartupInfoW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
user32
GetClientRect
GetWindowDC
ReleaseDC
GetDesktopWindow
GetWindowRect
CreateWindowExW
DrawTextW
UpdateWindow
GetDC
GetWindowTextW
RegisterClassExW
ShowWindow
LoadCursorW
SetTimer
TranslateMessage
DispatchMessageW
GetMessageW
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
gdi32
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
SetFileSecurityW
RegCreateKeyExW
shell32
SHGetFolderPathA
rpcrt4
UuidCreate
RpcStringFreeW
UuidToStringW
wininet
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
Sections
.text Size: 215KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ