Static task
static1
Behavioral task
behavioral1
Sample
8cce782a04cf19f5649af05faa710adf_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8cce782a04cf19f5649af05faa710adf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cce782a04cf19f5649af05faa710adf_JaffaCakes118
-
Size
279KB
-
MD5
8cce782a04cf19f5649af05faa710adf
-
SHA1
bac5d385e4ac31e53040030f97696a8c85691ff1
-
SHA256
47eb9345e4b48c1defc41d1f16cbe7ff587a60fa63326e3b211b6a7de7b0a934
-
SHA512
e5e65bec52559652863f8d5150df11744b9e82f44a2a58e986c390d14fae095429f34de1767f14bdbbbf3fb0c80b97ad36d31abda7dea604324ea1df4fc5c56e
-
SSDEEP
6144:ixEUf93Z8l4l6+8r48pRzdI/1sjTJShqe/AA2zWwOZvVeEcza/l8q:vU7wPRzS9gwpiOZdJLl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cce782a04cf19f5649af05faa710adf_JaffaCakes118
Files
-
8cce782a04cf19f5649af05faa710adf_JaffaCakes118.exe windows:4 windows x86 arch:x86
c45a3bff6f8bee3e9e4e75dd0d5c3506
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetRasterizerCaps
GetEnhMetaFileA
RestoreDC
DescribePixelFormat
CreateDiscardableBitmap
SetMapMode
LineTo
SetLayout
PlayMetaFile
CopyMetaFileA
StartPage
GetRandomRgn
SetPolyFillMode
LineDDA
StartDocW
GetLogColorSpaceW
CreateRectRgnIndirect
CreateHatchBrush
GetGlyphOutlineW
GetPolyFillMode
GetICMProfileA
GetCurrentObject
comdlg32
PageSetupDlgA
FindTextW
GetFileTitleA
ChooseFontA
ChooseColorW
GetSaveFileNameA
ReplaceTextW
PrintDlgA
FindTextA
ChooseFontW
GetOpenFileNameW
GetFileTitleW
GetOpenFileNameA
PrintDlgW
wininet
InternetSecurityProtocolToStringW
InternetQueryFortezzaStatus
GetUrlCacheEntryInfoExA
InternetGetConnectedStateExA
FtpGetFileSize
InternetSetDialStateA
FreeUrlCacheSpaceW
InternetAutodialHangup
InternetGoOnlineW
GopherGetLocatorTypeA
GopherCreateLocatorA
FindFirstUrlCacheEntryExA
FindNextUrlCacheEntryExW
InternetFortezzaCommand
SetUrlCacheEntryInfoA
FtpCommandA
FtpRemoveDirectoryW
FtpRenameFileW
UpdateUrlCacheContentPath
InternetGetLastResponseInfoA
InternetSetOptionA
LoadUrlCacheContent
user32
DdeSetQualityOfService
kernel32
HeapAlloc
VirtualAlloc
HeapFree
VirtualFree
LCMapStringW
GetOEMCP
InterlockedIncrement
UnhandledExceptionFilter
TlsFree
GetTimeFormatA
IsDebuggerPresent
GetCurrentThreadId
GetLocaleInfoA
RtlUnwind
LeaveCriticalSection
SetConsoleCtrlHandler
VirtualQuery
SetEnvironmentVariableA
GetCurrentProcess
GetEnvironmentStringsW
HeapReAlloc
SetHandleCount
InterlockedExchange
GetFileType
MultiByteToWideChar
DosDateTimeToFileTime
DeleteCriticalSection
TlsSetValue
WriteFile
TlsAlloc
WideCharToMultiByte
GetCPInfo
GetDateFormatA
GetNumberFormatW
GetCommandLineA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThread
FreeEnvironmentStringsA
TlsGetValue
InterlockedDecrement
GetACP
GetProcessHeap
InitializeCriticalSection
GetEnvironmentStrings
GetModuleHandleA
GetStringTypeW
CompareStringW
HeapDestroy
IsValidCodePage
GetUserDefaultLCID
CompareStringA
GetProcAddress
GetLastError
GetModuleFileNameA
HeapSize
Sleep
SetLastError
GetLocaleInfoW
ExitProcess
LCMapStringA
IsValidLocale
FreeLibrary
LoadLibraryA
GetVersionExA
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetCurrentProcessId
QueryPerformanceCounter
EnumSystemLocalesA
GetTickCount
GetStartupInfoA
HeapCreate
FreeEnvironmentStringsW
EnterCriticalSection
GetStdHandle
GetStringTypeA
advapi32
LookupSecurityDescriptorPartsA
CryptDestroyHash
CryptSetProviderExW
RegQueryValueExA
RegEnumValueA
CryptAcquireContextW
CryptGenKey
LogonUserW
CryptDecrypt
AbortSystemShutdownA
RegFlushKey
RegLoadKeyW
CryptEncrypt
CryptCreateHash
Sections
.text Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ