Static task
static1
Behavioral task
behavioral1
Sample
8666df605a89b8ecb4511e1933c72113_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8666df605a89b8ecb4511e1933c72113_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8666df605a89b8ecb4511e1933c72113_JaffaCakes118
-
Size
349KB
-
MD5
8666df605a89b8ecb4511e1933c72113
-
SHA1
a613954a31a743eaefa26922f85a524f94c00310
-
SHA256
a3297e8774eb80569f785ee7b0e52615451501c854bd21cdd052044bf185bc18
-
SHA512
809213085b4fd18ee259c66190269d0a02d3c7f5768f369f814d896afd31fd680f7f9bb18f762732bb53addc51151bf776764379a5963a41de4ac9cd9f612afe
-
SSDEEP
6144:NYzfXvnejwlFPc6z2zw4hJIE5pkry0F9CDj4u6248TCE/2LLu8TUiQmjhyf:NYTllFPc0f4h+yzDjLp/WuEUPmjAf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8666df605a89b8ecb4511e1933c72113_JaffaCakes118
Files
-
8666df605a89b8ecb4511e1933c72113_JaffaCakes118.exe windows:4 windows x86 arch:x86
5af14fabdf374f9f499a2f3612c25380
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Merge
MakeDragList
ImageList_GetDragImage
ImageList_SetIconSize
ImageList_Destroy
CreatePropertySheetPageW
DrawStatusText
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Remove
CreateStatusWindowA
InitCommonControlsEx
ImageList_SetFilter
ImageList_AddIcon
ImageList_Copy
ImageList_Create
ImageList_LoadImage
ImageList_LoadImageA
comdlg32
ChooseFontW
ReplaceTextW
gdi32
SetBitmapBits
GetViewportExtEx
CombineRgn
SetICMProfileW
kernel32
LeaveCriticalSection
WideCharToMultiByte
GetEnvironmentStringsW
TlsAlloc
SetVolumeLabelW
DeleteCriticalSection
LCMapStringA
VirtualFree
WriteFile
GetTimeZoneInformation
SetConsoleCtrlHandler
DebugBreak
GetCurrentProcess
GlobalFindAtomA
SetFilePointer
InitializeCriticalSection
CloseHandle
GetCPInfo
GetVersion
GetStringTypeA
SetStdHandle
InterlockedDecrement
Sleep
IsBadWritePtr
GetModuleHandleA
HeapValidate
MultiByteToWideChar
GetTickCount
GetProcessShutdownParameters
HeapDestroy
InterlockedIncrement
TlsSetValue
GetACP
CompareStringW
HeapReAlloc
FreeEnvironmentStringsW
CreateMutexA
CreateThread
GetFileType
GlobalAddAtomW
GetSystemTime
LCMapStringW
GetNamedPipeHandleStateA
LoadLibraryA
GetStringTypeW
IsBadReadPtr
GetOEMCP
GetProfileStringW
GetPriorityClass
FoldStringA
TlsFree
SetHandleCount
GetCommandLineA
FindResourceExA
QueryPerformanceCounter
ResetEvent
OpenMutexA
EnterCriticalSection
AllocConsole
VirtualAlloc
GetLastError
SetConsoleOutputCP
FlushFileBuffers
InterlockedExchange
GetCurrentProcessId
HeapCreate
OutputDebugStringA
GetStdHandle
GetProcAddress
ExitThread
VirtualQuery
GetCurrentThreadId
TlsGetValue
HeapFree
RtlUnwind
UnhandledExceptionFilter
GetSystemTimeAsFileTime
ExitProcess
GetEnvironmentStrings
LoadLibraryW
ReadFile
FillConsoleOutputCharacterA
GetStartupInfoA
SetLastError
FreeEnvironmentStringsA
GetModuleFileNameA
GetLocalTime
TerminateProcess
GetCurrencyFormatA
CompareStringA
GetCurrentThread
SetEnvironmentVariableA
HeapAlloc
user32
RegisterClassExA
LockWindowUpdate
CreateWindowExW
EnumThreadWindows
MessageBoxW
DestroyWindow
CallNextHookEx
OemToCharBuffA
RegisterClassW
DefWindowProcA
SetClipboardData
GetMessageExtraInfo
GetKeyboardLayoutList
InsertMenuItemA
ShowWindow
DlgDirSelectExA
MapVirtualKeyExA
PostThreadMessageA
DrawFocusRect
RegisterClassA
GetWindowTextLengthW
CreateIconFromResourceEx
GetWindow
LoadCursorA
GetSubMenu
GetClientRect
shell32
ExtractIconW
SheChangeDirA
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ