Static task
static1
Behavioral task
behavioral1
Sample
775c81be1ea447c3603fd9659ed03794_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
775c81be1ea447c3603fd9659ed03794_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
775c81be1ea447c3603fd9659ed03794_JaffaCakes118
-
Size
148KB
-
MD5
775c81be1ea447c3603fd9659ed03794
-
SHA1
755cc1fb6ce061762108848be022616889af7baf
-
SHA256
4d5809045e98d8aa1007a68535227084729368a0279eeed28dbf643b746f27ac
-
SHA512
0bffb6735dd22a961bac56b3c748603ad04e8a31eb14b6eea1aca3500046ada569a7363b389b4c74d6720d0f4fa545525cc9b547c68ae0d9bec4b73b3e3edf6d
-
SSDEEP
3072:TNAFbkuSZsH6CioepQ7H3q+XqtgoZpC5eQ3yPg4pLXAKdNvu:BAV2ALYpgHlqGJ5e2ELzAKdNG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 775c81be1ea447c3603fd9659ed03794_JaffaCakes118
Files
-
775c81be1ea447c3603fd9659ed03794_JaffaCakes118.exe windows:4 windows x86 arch:x86
31c7407eb66943882322a42e746ad998
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
CreateProcessA
LeaveCriticalSection
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
GetStringTypeW
GetStringTypeA
GetShortPathNameA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
lstrlenA
MultiByteToWideChar
lstrlenW
GetCommandLineA
GetCurrentThreadId
lstrcmpiA
CreateMutexA
GetLastError
InterlockedDecrement
CloseHandle
CompareFileTime
GetEnvironmentVariableA
HeapSize
TerminateProcess
RaiseException
ExitProcess
GetVersion
GetStartupInfoA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
LocalFree
user32
GetKeyboardLayout
EnumDisplaySettingsA
SendMessageA
DefWindowProcA
PostQuitMessage
PeekMessageA
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetCursorPos
GetClassInfoExA
DispatchMessageA
wsprintfA
RegisterClassExA
DestroyWindow
UnregisterHotKey
RegisterHotKey
LoadCursorA
MapVirtualKeyA
GetKeyNameTextA
CharNextA
RegisterClassA
CreateWindowExA
GetMessageA
advapi32
RegDeleteValueA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyA
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
ole32
CoInitialize
CoTaskMemAlloc
CoRevokeClassObject
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoRegisterClassObject
CoTaskMemRealloc
oleaut32
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
VariantClear
SysAllocString
SysFreeString
hccutils
InitializeKeyHook
LoadSTRING
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.drdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE