Static task
static1
Behavioral task
behavioral1
Sample
730c1fddf8d0a04e7383a8733b557634_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
730c1fddf8d0a04e7383a8733b557634_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
730c1fddf8d0a04e7383a8733b557634_JaffaCakes118
-
Size
2.1MB
-
MD5
730c1fddf8d0a04e7383a8733b557634
-
SHA1
28b4b3871bdcc6d56303a21807a6703564ffe3cb
-
SHA256
af84d0f3fd2559659ccadef100bb774c8c757a65ad1542fc8054ee6e30ea73b2
-
SHA512
67273f16c527ff2467dacba18cb133b52ded6c1bdb997b81369e5dbcb8a43d6d92a29a1451daf5d0f86130cf1e4b98fb1c2b0e6950281e061e7983987e308c83
-
SSDEEP
49152:JLgz5w2dVbpEp/QReV7dFtCIipnH3buHlZxezqR:JUdw+VbpEaKMI6LuFZUzqR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 730c1fddf8d0a04e7383a8733b557634_JaffaCakes118
Files
-
730c1fddf8d0a04e7383a8733b557634_JaffaCakes118.exe windows:4 windows x86 arch:x86
ed74ff308e654962ce0d5563010becdf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PeekConsoleInputW
GetCommConfig
SystemTimeToFileTime
MultiByteToWideChar
WriteFile
OutputDebugStringW
DeleteFiber
GetVolumeInformationW
CreateFileW
GetOverlappedResult
CompareStringW
SetFileAttributesA
SetThreadLocale
_lopen
ExitProcess
ReadFile
GetProfileStringA
ExitThread
GetStringTypeExW
GetCommModemStatus
FlushConsoleInputBuffer
VirtualAlloc
SetConsoleMode
VirtualAllocEx
ClearCommBreak
ConnectNamedPipe
FormatMessageA
lstrcpyA
ReadConsoleA
PeekNamedPipe
LeaveCriticalSection
WriteConsoleOutputW
SetProcessAffinityMask
SetProcessShutdownParameters
GetSystemInfo
CreateDirectoryA
WritePrivateProfileStructA
UnhandledExceptionFilter
RemoveDirectoryW
SetHandleCount
SetEnvironmentVariableW
user32
CreateWindowExA
EnumDisplayMonitors
GetDC
DefWindowProcW
TrackPopupMenuEx
GetPropW
SetMessageQueue
DrawIconEx
ValidateRgn
MessageBoxA
CharToOemW
GetKeyboardLayout
SetClipboardViewer
GetMenuDefaultItem
DrawAnimatedRects
GetNextDlgGroupItem
DefFrameProcA
TrackMouseEvent
CharNextA
SetCursor
LoadCursorA
WaitForInputIdle
GetWindowPlacement
GetFocus
GetSysColor
GrayStringA
UnionRect
IsCharAlphaNumericA
SwapMouseButton
SetSysColors
GetUserObjectInformationW
SetDlgItemTextW
SetTimer
wsprintfA
GetClassLongA
GetWindowContextHelpId
gdi32
CreateEllipticRgnIndirect
EnumEnhMetaFile
PlayEnhMetaFileRecord
CreateDiscardableBitmap
GetBrushOrgEx
GetTextCharset
CreateDCA
WidenPath
CreateBitmapIndirect
GetPaletteEntries
PathToRegion
CloseFigure
CreatePolygonRgn
ScaleWindowExtEx
GetRgnBox
InvertRgn
GetTextCharsetInfo
advapi32
GetSecurityDescriptorGroup
ObjectDeleteAuditAlarmW
CryptDestroyHash
LookupAccountNameA
CryptSignHashW
DeregisterEventSource
OpenSCManagerW
GetSidSubAuthority
OpenSCManagerA
GetFileSecurityW
SetNamedSecurityInfoW
ole32
CoGetClassObject
StgCreateStorageEx
CoCreateInstanceEx
PropVariantCopy
StringFromGUID2
OleLockRunning
oleaut32
LoadTypeLi
SysStringLen
comctl32
CreatePropertySheetPageW
CreateToolbarEx
ImageList_Merge
shlwapi
PathFindFileNameW
PathRemoveBlanksA
PathCompactPathW
PathRemoveBackslashA
SHGetValueW
StrFormatKBSizeW
PathStripToRootW
StrRChrW
PathCombineW
PathCompactPathExW
UrlCanonicalizeW
StrRetToStrW
HashData
StrCmpW
SHEnumValueW
PathAppendA
SHAutoComplete
PathIsDirectoryEmptyW
PathIsFileSpecW
Sections
.text Size: 12KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ