Static task
static1
Behavioral task
behavioral1
Sample
8628e60ef8699a08eb3b41f49f45a2d9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8628e60ef8699a08eb3b41f49f45a2d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8628e60ef8699a08eb3b41f49f45a2d9_JaffaCakes118
-
Size
116KB
-
MD5
8628e60ef8699a08eb3b41f49f45a2d9
-
SHA1
4cbc90652a17a016e73e24c540259dd531fcf3c4
-
SHA256
4b69dc68c7539acf0669c5f8ed9d20e8d6bc030fe6073fc66e8b67983e4421e5
-
SHA512
66c670b0db8ff4f7e58d3c2d7713b3e077350424c3c77cd03c9aac943b4e4333109a4be37805ae0dc647c4b85fe909d7afeddbf45275937381a970726090c3fe
-
SSDEEP
1536:ff4zryrcaTowSr5M4y3RsaaCd8hD/r+C04dsRnlmbc43lzX5skZa:nyAS9By3Rf0h/KC04dIlmQUlzJsI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8628e60ef8699a08eb3b41f49f45a2d9_JaffaCakes118
Files
-
8628e60ef8699a08eb3b41f49f45a2d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
12836de39091bdfe09b1ca8d131242b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
GetACP
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCurrentThreadId
GetTickCount
OpenProcess
TerminateProcess
Sleep
GetModuleFileNameA
SetCurrentDirectoryA
GetModuleHandleA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
GetOEMCP
SetErrorMode
GetProcessVersion
GetCPInfo
WideCharToMultiByte
GetLastError
MultiByteToWideChar
WritePrivateProfileStringA
InterlockedIncrement
GlobalFlags
TlsGetValue
lstrlenA
lstrcpynA
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
TlsAlloc
GlobalHandle
DeleteCriticalSection
GetEnvironmentStringsW
LocalAlloc
InitializeCriticalSection
CloseHandle
LocalFree
InterlockedDecrement
MulDiv
SetLastError
GetVersion
LoadLibraryA
FreeLibrary
GlobalAddAtomA
lstrcatA
GlobalGetAtomNameA
GlobalUnlock
GlobalFindAtomA
lstrcpyA
FindResourceA
GlobalFree
LockResource
LoadResource
GlobalAlloc
GlobalLock
lstrcmpiA
GlobalDeleteAtom
lstrcmpA
SetHandleCount
GetCurrentThread
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
user32
CopyRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
IsDialogMessageA
SetWindowTextA
ShowWindow
ClientToScreen
GetDC
ReleaseDC
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
DestroyMenu
GetTopWindow
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
PostQuitMessage
EnableWindow
PeekMessageA
TranslateMessage
DispatchMessageA
GetParent
WinHelpA
GetCapture
GetMenuItemCount
GetDesktopWindow
EnumChildWindows
IsIconic
GetSystemMetrics
GetClientRect
SendMessageA
PostMessageA
LoadIconA
GetWindowThreadProcessId
EndDialog
UnregisterClassA
gdi32
GetClipBox
GetObjectA
DeleteDC
SetBkColor
SaveDC
RestoreDC
GetStockObject
SelectObject
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
ScaleWindowExtEx
DeleteObject
GetDeviceCaps
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
CreateBitmap
SetTextColor
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegCreateKeyA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteA
comctl32
ord17
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ