Static task
static1
Behavioral task
behavioral1
Sample
86bbd7c5f63db5c6c48b5ef211962eaa_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
86bbd7c5f63db5c6c48b5ef211962eaa_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
86bbd7c5f63db5c6c48b5ef211962eaa_JaffaCakes118
-
Size
44KB
-
MD5
86bbd7c5f63db5c6c48b5ef211962eaa
-
SHA1
4d87c5b624006154ea848083028fc685ee1a50c1
-
SHA256
ec18eee19c7814ac39460d0b606b07419a5fb66c4a042b6c93c7685859f5d0a4
-
SHA512
2357ffbfd8f8bdd9813cb20b796b1cccb88e48ba905661a23bf11cf4ff756b1fcaa57a02c044bb96441fca5771bfb3e6bfec4ec329a4b070e4c9228505ff76ab
-
SSDEEP
768:WFEnLUAeFflWtNuj1Xx78t7UvxCpi7S52EzTGYUehekRr4uktoIC:WmLxyfkW1Xqt7Uv0pi7tSyLkRr4uktoz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86bbd7c5f63db5c6c48b5ef211962eaa_JaffaCakes118
Files
-
86bbd7c5f63db5c6c48b5ef211962eaa_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc0cf9a81fa594d623b50f53729e7900
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalCompact
SetCalendarInfoA
VerLanguageNameW
UnlockFileEx
HeapDestroy
GetPrivateProfileSectionW
MoveFileExW
IsBadWritePtr
EnumResourceNamesA
OpenWaitableTimerA
MoveFileWithProgressW
GetSystemWindowsDirectoryW
EnumCalendarInfoW
GetProfileStringW
GetComputerNameExA
FindCloseChangeNotification
BuildCommDCBAndTimeoutsW
GetLocalTime
GetComputerNameW
FindFirstVolumeMountPointW
GetWindowsDirectoryW
GenerateConsoleCtrlEvent
ChangeTimerQueueTimer
GetTickCount
CreateWaitableTimerW
SetWaitableTimer
CreateRemoteThread
EnumSystemLanguageGroupsW
FindFirstChangeNotificationA
EndUpdateResourceW
CreateHardLinkA
OpenEventA
IsBadCodePtr
GetConsoleAliasExesW
GetThreadPriority
OpenFileMappingW
IsProcessorFeaturePresent
DnsHostnameToComputerNameA
GetDefaultCommConfigA
GetProcessPriorityBoost
QueryDosDeviceW
SetDefaultCommConfigW
GetExitCodeThread
ConnectNamedPipe
FindNextFileA
Thread32Next
GetEnvironmentStringsA
WaitForMultipleObjects
lstrcmp
VerLanguageNameA
ReadConsoleOutputCharacterA
SetThreadLocale
LoadLibraryW
ResetEvent
TransactNamedPipe
MapUserPhysicalPages
LocalSize
IsBadReadPtr
ConvertThreadToFiber
InterlockedDecrement
SetThreadExecutionState
CopyFileExW
GetDefaultCommConfigW
RequestWakeupLatency
FreeResource
GetCalendarInfoW
GlobalAddAtomA
GetPrivateProfileStringW
FlushFileBuffers
GetSystemDefaultLangID
SetTimerQueueTimer
GetStringTypeExA
CommConfigDialogW
GetConsoleFontSize
_lclose
LCMapStringW
GetPrivateProfileSectionA
FindAtomW
CreateDirectoryA
EraseTape
GetBinaryType
CreateMutexA
WriteProfileStringW
PeekConsoleInputW
SetLocaleInfoA
SetCommState
RequestDeviceWakeup
OpenWaitableTimerW
SetFileAttributesW
GetCurrentProcess
_lread
InitializeCriticalSectionAndSpinCount
OpenThread
EnumUILanguagesA
CallNamedPipeA
SetProcessPriorityBoost
DeleteVolumeMountPointW
ExpandEnvironmentStringsW
OpenFile
GetFileTime
LoadLibraryA
GetProcAddress
LocalAlloc
user32
GetAltTabInfo
CreateMenu
FrameRect
CheckRadioButton
TranslateMDISysAccel
MapWindowPoints
CopyRect
DdeCmpStringHandles
DestroyWindow
GetKeyboardState
SetWindowsHookA
WinHelpA
WaitForInputIdle
EndPaint
AllowSetForegroundWindow
GetForegroundWindow
RealGetWindowClassW
IsWindowUnicode
EnableWindow
SetClassLongA
DdeQueryStringA
CharPrevExA
SetLayeredWindowAttributes
BlockInput
GetNextDlgTabItem
GetShellWindow
MsgWaitForMultipleObjects
DrawFocusRect
SendMessageW
LoadCursorFromFileW
GetClassNameW
DefMDIChildProcA
FillRect
KillTimer
ChangeClipboardChain
EndTask
SetCaretBlinkTime
wsprintfA
GetWindowTextA
EnumDisplaySettingsW
EnumWindowStationsW
ChangeMenuA
MessageBoxW
SubtractRect
PeekMessageW
BeginPaint
GetWindowLongA
GetWindowPlacement
GetFocus
GetDialogBaseUnits
GetOpenClipboardWindow
GetPropA
SetPropA
ToUnicode
ModifyMenuA
DestroyAcceleratorTable
SendInput
SetWindowLongW
GetDesktopWindow
DdeKeepStringHandle
CreateWindowExA
OemKeyScan
GetPropW
DdeAbandonTransaction
GetKeyState
CreateCaret
RegisterHotKey
UpdateLayeredWindow
EnumDisplayMonitors
CloseDesktop
DdeCreateStringHandleW
TranslateAcceleratorW
MapVirtualKeyExW
InsertMenuItemA
SwapMouseButton
GetQueueStatus
GetPriorityClipboardFormat
RegisterClassExA
WinHelpW
GetWindowTextLengthA
CreateCursor
EnumWindowStationsA
PostMessageW
FindWindowA
InvertRect
OpenIcon
GetMenu
EnumChildWindows
GetMessagePos
WindowFromPoint
CreateAcceleratorTableW
EnumThreadWindows
GetTabbedTextExtentW
WINNLSGetIMEHotkey
LoadCursorW
IMPQueryIMEA
keybd_event
CreateWindowStationW
ToUnicodeEx
SetUserObjectInformationA
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ