Static task
static1
Behavioral task
behavioral1
Sample
722faf3e9e41e6af15a9e0357f0f31eb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
722faf3e9e41e6af15a9e0357f0f31eb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
722faf3e9e41e6af15a9e0357f0f31eb_JaffaCakes118
-
Size
272KB
-
MD5
722faf3e9e41e6af15a9e0357f0f31eb
-
SHA1
70d7ef9a4478235ecdec57db84f6c55c077557bb
-
SHA256
97525ee1c4f43a091689f6d2c5ba39c1a4fe18d44069dffbc56ca8c20650603c
-
SHA512
32355e8ab78941ba868ebe0150110b83b4bed2d9d353547627e44b183a418fa1e19166311623ccb7e316311b5e5cde859623277e0de1b66f1451e2c9ca659899
-
SSDEEP
6144:a1Hd9f8Kb+AksKLuTpNJy/k+ETqzMhVb15B:4HzasRpNJ+ETsKV5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 722faf3e9e41e6af15a9e0357f0f31eb_JaffaCakes118
Files
-
722faf3e9e41e6af15a9e0357f0f31eb_JaffaCakes118.exe windows:5 windows x86 arch:x86
b31bd6c9ed0675fa40af83065f65a738
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
ExitProcess
GetTickCount
CreateEventW
QueryPerformanceCounter
GlobalMemoryStatus
GetDiskFreeSpaceExW
GetLongPathNameA
Process32First
Process32Next
OpenProcess
OpenThread
SuspendThread
ResumeThread
lstrcpyA
CreateToolhelp32Snapshot
Thread32First
Thread32Next
DeleteFileW
GetModuleFileNameW
CreateDirectoryW
SetFileAttributesW
CreateDirectoryA
SetFileAttributesA
OutputDebugStringW
OutputDebugStringA
GetModuleFileNameA
SetCurrentDirectoryA
GetCommandLineA
GetModuleHandleW
GetTempPathW
GetPriorityClass
ResetEvent
SetEvent
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
RaiseException
TerminateThread
CloseHandle
CreateThread
SetThreadPriority
Sleep
GetCurrentProcess
SetPriorityClass
SetErrorMode
GetCurrentThreadId
lstrlenA
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
user32
FindWindowW
SendMessageA
PostMessageA
EnableWindow
PeekMessageA
GetDesktopWindow
RegisterClassA
GetWindowTextA
GetWindowThreadProcessId
IsIconic
GetMessageA
EnumThreadWindows
wvsprintfW
DispatchMessageA
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassExA
FindWindowA
CreateWindowExA
ShowWindow
UpdateWindow
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
DefWindowProcA
UnregisterClassA
IsWindowVisible
shlwapi
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathFileExistsA
odbc32
SQLFreeConnect
ole32
CoInitialize
CoUninitialize
CoCreateInstance
advapi32
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyW
RegEnumValueW
RegEnumValueA
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegCloseKey
shell32
SHGetSpecialFolderPathA
ShellExecuteExW
wininet
HttpSendRequestA
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
HttpOpenRequestA
InternetConnectA
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 67KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ