Static task
static1
Behavioral task
behavioral1
Sample
868982193b01b71b96e9bf5b573d07dd_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
868982193b01b71b96e9bf5b573d07dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
868982193b01b71b96e9bf5b573d07dd_JaffaCakes118
-
Size
428KB
-
MD5
868982193b01b71b96e9bf5b573d07dd
-
SHA1
8f364c440cfedfd012712f4c475167ed99811dc5
-
SHA256
62c181bd74ae8fb239d61090297ef28728dee882633b2e094e2a716120a754eb
-
SHA512
c00d581714405cea9743fb6905c5603f4c448dfbfa3c95b86b83b887485b4fd0157502c09014cb42d2a557db1c637025260791d9ba3dee67a230b96709e84ac9
-
SSDEEP
12288:r5Kv+zxgSMErl6DbUhHjvDkWpSMIwSyqtj:4v+1gSHHhj7vIwSf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 868982193b01b71b96e9bf5b573d07dd_JaffaCakes118
Files
-
868982193b01b71b96e9bf5b573d07dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
d941096df4034c6a258e011a05be6292
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MapViewOfFile
CompareStringA
RaiseException
GetCurrentThread
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
SizeofResource
FileTimeToLocalFileTime
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GetConsoleCP
GlobalFree
lstrlenA
HeapCreate
SetStdHandle
GetLastError
InterlockedIncrement
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GlobalLock
WaitForMultipleObjects
FindNextFileA
CreateFileMappingA
ResetEvent
FindFirstFileA
WriteFile
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
GetEnvironmentVariableA
DeleteFileA
CreateDirectoryA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
TlsFree
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
GetVersion
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
GetVersionExA
HeapAlloc
IsDebuggerPresent
VirtualProtect
GetModuleFileNameW
TlsGetValue
SetLastError
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
FormatMessageW
LocalFree
FreeLibrary
GetStringTypeW
HeapReAlloc
GetExitCodeProcess
GetSystemTimeAsFileTime
GetStringTypeA
WideCharToMultiByte
GetLocaleInfoW
FreeEnvironmentStringsW
LoadLibraryExW
LocalAlloc
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
SetConsoleCtrlHandler
FatalAppExitA
RtlUnwind
IsBadWritePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
SetFilePointer
ReadFile
CloseHandle
GetACP
GetModuleHandleW
InterlockedExchange
GetEnvironmentStrings
UnmapViewOfFile
FindResourceW
VirtualFree
Sleep
IsBadReadPtr
FindResourceA
VirtualAlloc
LeaveCriticalSection
GetOEMCP
user32
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
DefWindowProcA
SetFocus
DispatchMessageA
CreateWindowExA
GetSubMenu
EnableMenuItem
LoadStringA
GetWindow
TranslateMessage
PeekMessageA
EnableWindow
ShowWindow
UpdateWindow
GetParent
DestroyWindow
ClientToScreen
GetClientRect
SendMessageA
ReleaseDC
GetCursorPos
GetDC
EndPaint
IsWindow
SetWindowPos
PostQuitMessage
DestroyMenu
MoveWindow
SetForegroundWindow
SetTimer
GetDlgItem
ScreenToClient
EndDialog
MessageBeep
SetDlgItemTextA
MessageBoxA
GetSysColor
SystemParametersInfoA
SetCursor
SetWindowTextA
InvalidateRect
PtInRect
IsWindowVisible
wsprintfA
GetWindowLongA
advapi32
RegSetValueExA
RegDeleteKeyA
RegQueryValueExW
RegCreateKeyExA
RegCreateKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegCloseKey
ole32
CoTaskMemFree
CoCreateInstance
gdi32
SelectObject
DeleteDC
DeleteObject
GetDeviceCaps
SetBkColor
BitBlt
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 336KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ