Static task
static1
Behavioral task
behavioral1
Sample
87fe81420694fff4cf215632feac3f06_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87fe81420694fff4cf215632feac3f06_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
87fe81420694fff4cf215632feac3f06_JaffaCakes118
-
Size
397KB
-
MD5
87fe81420694fff4cf215632feac3f06
-
SHA1
91abb8d51ac123bcaeed12bbfd4721aa07e5357f
-
SHA256
2c322e50828c0ae1c9e1d37b5f5477004ddf0a93100571952ad676ad0a2c5cac
-
SHA512
43dadf94815111f56e621ca3d9e83fc95f1a18e94a905dc955d9da239b324f0ba797945ab191ea15c423c81c2f0767e9577327d0132749ca5d08be82fb24f778
-
SSDEEP
12288:WXmjNZEUtqMpzL1lTw61yExdBTOYBqG6Oy8HlHR:WWZ1p3jOWGgF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87fe81420694fff4cf215632feac3f06_JaffaCakes118
Files
-
87fe81420694fff4cf215632feac3f06_JaffaCakes118.exe windows:4 windows x86 arch:x86
8844aafd2bc1b6202907c25e0dff8df5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegQueryValueExW
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
gdi32
GetDeviceCaps
DeleteObject
CreateFontIndirectA
SetBkColor
SelectObject
kernel32
VirtualAlloc
FindResourceA
IsBadReadPtr
Sleep
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
GetEnvironmentStrings
InterlockedExchange
GetVersion
GetModuleHandleW
GetACP
FindFirstFileA
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
InterlockedCompareExchange
GetCommandLineA
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetCurrentProcessId
SizeofResource
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GlobalFree
lstrlenA
UnmapViewOfFile
LCMapStringW
GetLastError
InterlockedIncrement
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GetProcAddress
DuplicateHandle
CreateFileMappingA
CompareStringA
lstrcpyA
FindNextFileW
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GlobalLock
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
VirtualProtect
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
CloseHandle
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
GetLocalTime
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
GetCurrentThread
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
GetExitCodeProcess
FormatMessageW
LocalFree
GetOEMCP
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteFile
GetStringTypeA
GetCPInfo
GetTempPathA
SetStdHandle
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
SetEndOfFile
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
GetSystemDefaultLangID
GetSystemDefaultLCID
GetUserDefaultLangID
GetUserDefaultLCID
oleaut32
SysAllocStringLen
SysAllocString
SysStringLen
user32
SetCursor
CallWindowProcA
GetClientRect
InvalidateRect
IsWindowVisible
GetKeyState
GetSysColor
MessageBoxA
EndDialog
LoadIconA
LoadCursorA
ScreenToClient
GetDlgItem
SetTimer
GetWindowLongA
CheckMenuItem
IsIconic
GetWindowRect
GetSystemMetrics
KillTimer
BeginPaint
PeekMessageA
SetFocus
EndPaint
ReleaseDC
DispatchMessageA
CreateWindowExA
GetSubMenu
RegisterClassA
EnableMenuItem
LoadStringA
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
DestroyWindow
MoveWindow
SendMessageA
UnregisterClassA
GetCursorPos
GetDC
IsWindow
SetWindowPos
PostQuitMessage
SetForegroundWindow
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 347KB - Virtual size: 347KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ