Static task
static1
Behavioral task
behavioral1
Sample
76f5b60e53603f01a0c20d2e7912d35b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
76f5b60e53603f01a0c20d2e7912d35b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
76f5b60e53603f01a0c20d2e7912d35b_JaffaCakes118
-
Size
522KB
-
MD5
76f5b60e53603f01a0c20d2e7912d35b
-
SHA1
9bc2f1ea6863b01dce75db380ec5b47bc369350a
-
SHA256
297d71f341a1a5fa55818bc98ef59d78ba939636c75cd4097c33083fe6f917b9
-
SHA512
94b914ff5bc4d8921dc6fb6318e59a503b1ad02645128efe90d5f7c357b2e7568dbd7a985397bb2467d48a7a9a1dfca90582cd8d325d299a6e7cdfa30b566dba
-
SSDEEP
6144:0fdjdAGh1uUTuYjslKMOrRWoS3/cwniC/Ml1fcBuXqDHIFhYEdBvgJLusSGEQwWX:AdioPoOrRWDdMl+BDHIvNBRshwaGcmc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76f5b60e53603f01a0c20d2e7912d35b_JaffaCakes118
Files
-
76f5b60e53603f01a0c20d2e7912d35b_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d91c357146d9a58de4617c3eadec2ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
EnumCalendarInfoW
OpenSemaphoreW
UnmapViewOfFile
WritePrivateProfileStringW
_lopen
GetSystemTimeAdjustment
OpenFile
GetSystemTime
SetFileTime
GetBinaryTypeA
GetLogicalDriveStringsA
GetProfileIntA
GetDiskFreeSpaceExA
SetErrorMode
IsValidLocale
GlobalFindAtomA
GetHandleInformation
GetStringTypeExW
GetSystemInfo
PeekConsoleInputW
GetTempPathW
_llseek
ReleaseMutex
GetProcessHeap
GetThreadPriority
TryEnterCriticalSection
CloseHandle
SetEnvironmentVariableW
GetCommModemStatus
GlobalAddAtomW
ExitProcess
CreateProcessA
WritePrivateProfileStructA
SetupComm
GetSystemDirectoryW
GetDriveTypeW
PulseEvent
SetEvent
LoadLibraryExA
GetCurrentProcess
GlobalReAlloc
FindCloseChangeNotification
GlobalAddAtomA
SetThreadPriorityBoost
SetConsoleActiveScreenBuffer
EnumSystemCodePagesW
GetCommConfig
GlobalFree
ReadFileScatter
EnumSystemCodePagesA
GetTapeParameters
MultiByteToWideChar
GetDateFormatA
GetFullPathNameA
FlushConsoleInputBuffer
SetCommTimeouts
FindFirstFileExW
CreateEventA
lstrcmpiW
lstrcmpA
TlsGetValue
ReadConsoleInputW
GlobalUnlock
FileTimeToLocalFileTime
DeleteCriticalSection
GetCPInfo
VirtualQuery
OutputDebugStringA
VirtualProtect
MoveFileExA
GetNumberFormatW
GetUserDefaultLangID
GetLongPathNameA
user32
GetDialogBaseUnits
EqualRect
SetWinEventHook
WaitForInputIdle
IsWindow
CopyRect
GetMenu
gdi32
Chord
GetClipRgn
Arc
GetWinMetaFileBits
SetBkColor
CreateEllipticRgn
GetObjectType
GetEnhMetaFileHeader
SwapBuffers
CreateCompatibleBitmap
PolyBezier
GetCurrentPositionEx
comdlg32
ReplaceTextW
ChooseFontA
GetSaveFileNameA
advapi32
SetSecurityDescriptorDacl
LogonUserW
InitiateSystemShutdownA
GetSecurityDescriptorLength
OpenThreadToken
AccessCheckAndAuditAlarmA
LookupAccountSidW
RegSaveKeyW
RegSetValueW
StartServiceCtrlDispatcherA
GetSidSubAuthority
LookupPrivilegeValueW
IsTextUnicode
RegUnLoadKeyW
CryptImportKey
CryptHashData
QueryServiceLockStatusW
RegisterEventSourceA
RegLoadKeyW
shell32
DragAcceptFiles
SHFileOperationW
oleaut32
SafeArrayUnaccessData
SysFreeString
VariantCopy
SafeArrayPutElement
comctl32
ord17
shlwapi
SHRegSetUSValueW
StrStrA
StrFormatByteSize64A
PathFindNextComponentW
PathRemoveExtensionW
PathRemoveFileSpecA
StrCpyNW
StrCmpW
StrCatBuffA
PathIsFileSpecA
StrCmpNA
StrChrW
PathIsRootW
PathRelativePathToW
SHDeleteKeyA
PathCanonicalizeA
StrToIntW
PathIsUNCA
Sections
.text Size: 12KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ