Static task
static1
Behavioral task
behavioral1
Sample
73e23cfb99e89199e80300d093abc27e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
73e23cfb99e89199e80300d093abc27e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
73e23cfb99e89199e80300d093abc27e_JaffaCakes118
-
Size
564KB
-
MD5
73e23cfb99e89199e80300d093abc27e
-
SHA1
557541d5c16634098e73ccbbc582626aed252b4d
-
SHA256
0b594913e13b3e0156e5aa93aac4e3ecd00c73621a7db65b8191c9cf3c8368a3
-
SHA512
cf639f0e3bfc06115463449c4b7865bfa68f1054ef77053c826ffd0153f5ef5e864ac865a97afc05652787e5919c5a233df1b1e9faca7f7b73f3dd71cc79e3a6
-
SSDEEP
12288:VqrmZ5/qDNjikPoss5FDmXUrCWqyT8JbEghlAzwFYf50b9WcHc5:IGwNjikwMkrCW1AbEgh+ctw+c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73e23cfb99e89199e80300d093abc27e_JaffaCakes118
Files
-
73e23cfb99e89199e80300d093abc27e_JaffaCakes118.exe windows:4 windows x86 arch:x86
30ae24fc27fbc641625a61f1ad637582
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
EndDialog
BeginPaint
GetSystemMetrics
GetWindowRect
SetWindowLongA
GetDC
SystemParametersInfoA
SetWindowTextA
PtInRect
SetCursor
IsIconic
CreateWindowExA
CallWindowProcA
SetForegroundWindow
kernel32
GetFileAttributesW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
CloseHandle
SetLastError
GetFileSize
VirtualAlloc
LeaveCriticalSection
GetCurrentThreadId
HeapDestroy
SetEndOfFile
Sleep
InterlockedDecrement
VirtualFree
CreateFileW
lstrlenA
InitializeCriticalSection
GetModuleFileNameA
SetEnvironmentVariableA
GetModuleHandleW
GetSystemTimeAsFileTime
MulDiv
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
SetFilePointer
WideCharToMultiByte
CreateFileA
RaiseException
CompareStringW
GetProcessHeap
InterlockedCompareExchange
GetCommandLineA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
SetErrorMode
LockResource
GetCurrentProcessId
HeapSize
GetCurrentProcess
FreeEnvironmentStringsA
LoadLibraryA
GlobalUnlock
TlsAlloc
HeapAlloc
IsDebuggerPresent
HeapReAlloc
QueryPerformanceCounter
FreeLibrary
WaitForSingleObject
GlobalFree
SetHandleCount
LCMapStringW
EnterCriticalSection
HeapFree
TlsGetValue
GetLastError
ExitProcess
GetVersion
GetProcAddress
TerminateProcess
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStdHandle
GetFileType
TlsSetValue
GetEnvironmentVariableA
GetVersionExA
HeapCreate
RtlUnwind
WriteFile
InterlockedIncrement
GetCPInfo
GetACP
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
acgsy Size: 492KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
goieie Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gaecw Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE