Static task
static1
Behavioral task
behavioral1
Sample
85fe268164ea4e6d2d1adeebe886f6fb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
85fe268164ea4e6d2d1adeebe886f6fb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
85fe268164ea4e6d2d1adeebe886f6fb_JaffaCakes118
-
Size
503KB
-
MD5
85fe268164ea4e6d2d1adeebe886f6fb
-
SHA1
6fef28626989257fbe26681e8764f827be7814e5
-
SHA256
876fce404578b4c03b6ddc9ef1f97de01a63c131ef8b40884895995e894d7255
-
SHA512
65cb4537e44427650042eac6f5384540b2dfe687565fc5d78c20cad60b2f293bb5eafb5060bfabcf3eeb24d5cfb87de7176f637991c17790245a347decec4b2f
-
SSDEEP
12288:iyx+D0+M2Upl2S6udx48BUq0xjp3G99ajGkUumjr:iyxrcUpcTudx/MVdjGkUumjr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85fe268164ea4e6d2d1adeebe886f6fb_JaffaCakes118
Files
-
85fe268164ea4e6d2d1adeebe886f6fb_JaffaCakes118.exe windows:4 windows x86 arch:x86
8a2478d84aba9ea066c0a27fe330a3fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ExtractAssociatedIconA
SHQueryRecycleBinW
DragQueryFileW
SHGetMalloc
SheGetDirA
user32
RegisterWindowMessageA
BeginPaint
RemovePropW
SetMenuItemInfoA
DlgDirListComboBoxA
GetMenuInfo
CharUpperA
UnregisterHotKey
GetClassNameW
LoadImageA
SetWindowContextHelpId
SetClassLongA
SetPropA
SetDeskWallpaper
ChangeDisplaySettingsExA
GetMessageW
DrawStateA
GetClipboardSequenceNumber
RegisterClassA
ClientToScreen
RegisterClassExA
DispatchMessageA
GetClientRect
SetMenuInfo
UnhookWindowsHookEx
InsertMenuW
CountClipboardFormats
gdi32
EnumMetaFile
ResetDCW
GetGraphicsMode
OffsetClipRgn
GetPixelFormat
GetEnhMetaFileDescriptionA
GetViewportOrgEx
PaintRgn
GetEnhMetaFileA
EnumFontFamiliesExW
SetMetaFileBitsEx
GetMetaRgn
kernel32
GetDateFormatA
CreateNamedPipeA
LeaveCriticalSection
LCMapStringW
VirtualFree
EnterCriticalSection
HeapReAlloc
GetLocaleInfoA
SetFilePointer
VirtualProtect
GetVolumeInformationA
IsValidCodePage
FreeEnvironmentStringsA
LCMapStringA
HeapSize
GetVersionExA
GetModuleFileNameA
CreatePipe
WriteProfileStringA
TlsSetValue
CloseHandle
GetFileType
DeleteFileA
CompareStringA
TlsGetValue
LocalFileTimeToFileTime
GetEnvironmentStrings
VirtualUnlock
SetSystemTime
RtlUnwind
GetOEMCP
HeapDestroy
DeleteCriticalSection
GetCPInfo
SetLastError
ReadFile
GlobalSize
GetSystemTimeAsFileTime
GetStdHandle
CompareStringW
SetEnvironmentVariableA
EnumSystemLocalesA
GetCurrentProcess
GetACP
GetTimeFormatA
HeapFree
GetCommandLineA
WideCharToMultiByte
GetTickCount
GetStartupInfoW
CreateMutexA
TlsFree
SetConsoleCursorInfo
VirtualAlloc
IsBadWritePtr
GetStringTypeW
TerminateProcess
TlsAlloc
GetFileAttributesW
OpenMutexA
FlushFileBuffers
GetProcAddress
GetCurrentThread
lstrlen
GetCommandLineW
GetLastError
FoldStringA
GetTempFileNameA
IsValidLocale
lstrcpyA
GetEnvironmentStringsW
SetStdHandle
ExitProcess
GetStringTypeA
GetModuleHandleA
GetUserDefaultLCID
QueryPerformanceCounter
InterlockedExchange
SetHandleCount
HeapCreate
MultiByteToWideChar
GetLocaleInfoW
GetStartupInfoA
LoadLibraryA
lstrcpynW
InitializeCriticalSection
GetModuleFileNameW
HeapAlloc
GetPrivateProfileStructA
WaitForDebugEvent
GetTimeZoneInformation
GetSystemInfo
GetCurrentThreadId
ResumeThread
WriteFile
FreeEnvironmentStringsW
UnhandledExceptionFilter
GlobalReAlloc
GetCurrentProcessId
VirtualQuery
comctl32
InitCommonControlsEx
wininet
LoadUrlCacheContent
SetUrlCacheEntryGroup
FindFirstUrlCacheEntryA
InternetDialA
comdlg32
PrintDlgA
PageSetupDlgW
FindTextA
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ