Static task
static1
Behavioral task
behavioral1
Sample
8cfdc40ea9168b93d861441212177fec_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8cfdc40ea9168b93d861441212177fec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8cfdc40ea9168b93d861441212177fec_JaffaCakes118
-
Size
173KB
-
MD5
8cfdc40ea9168b93d861441212177fec
-
SHA1
e53a0569c8826626c5c114c97a86414ec8dad1ea
-
SHA256
7e60a6e366db4b304369b948ffb069719888f4aea0f8776a9ba3e876b2af2d39
-
SHA512
2d9b85a8cc48527eccc6c4dc90831e530af81dc95ee47bd1dd029ec24bc39c7bced93b4d22763913092320e0e0f5bdb27da3188f2d0fd0fa779c324c879b2ae3
-
SSDEEP
3072:ZJe4sKlNFh7XfJ+gkUCGgghyWxrxwcW72D4ZTlUrmfcfJqTM+mkBZMDHn:Zk4LlNFlvUghys62DQTqmqJqIGK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cfdc40ea9168b93d861441212177fec_JaffaCakes118
Files
-
8cfdc40ea9168b93d861441212177fec_JaffaCakes118.exe windows:4 windows x86 arch:x86
05494ff99f3b487876ed4cb26949f2b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetVDMCurrentDirectories
GetModuleFileNameW
MulDiv
GetEnvironmentStrings
GetProcessHeap
VirtualAlloc
CloseHandle
LoadLibraryA
InterlockedCompareExchange
LocalFree
InterlockedExchange
GetCurrentThreadId
lstrlenA
GetStdHandle
GetModuleHandleA
HeapSize
FreeEnvironmentStringsA
GetModuleHandleW
GetACP
lstrcmpiW
GetLastError
InterlockedDecrement
SizeofResource
CreateSemaphoreW
WritePrivateProfileSectionW
WideCharToMultiByte
GetOEMCP
GetSystemDirectoryW
SetUnhandledExceptionFilter
RaiseException
GetDriveTypeW
GetProcessHandleCount
ExitProcess
GetVersionExA
CreateFileA
FlushInstructionCache
GetFileSize
CreateFileMappingW
LeaveCriticalSection
QueryPerformanceCounter
GetStartupInfoA
CreateFileW
RtlUnwind
LCMapStringA
FreeLibrary
LoadResource
GetThreadLocale
LoadLibraryExW
InitializeCriticalSection
TlsSetValue
GetCommandLineA
WriteFile
GetFileType
CreateProcessW
HeapCreate
GetCurrentProcessId
EnumResourceNamesA
GetStringTypeA
DeleteFileW
ReadFile
SetLastError
TlsGetValue
IsProcessorFeaturePresent
HeapFree
Sleep
GetConsoleOutputCP
GetSystemTimeAsFileTime
UnhandledExceptionFilter
CopyFileW
LockResource
WaitForSingleObject
GetProcAddress
TlsAlloc
GetEnvironmentStringsW
GetStringTypeW
GetModuleFileNameA
HeapAlloc
WriteConsoleW
DeleteCriticalSection
LoadLibraryW
GetVersion
GetConsoleMode
LCMapStringW
FreeEnvironmentStringsW
IsDebuggerPresent
FlushFileBuffers
SetFilePointer
InterlockedIncrement
GetConsoleCP
GetCPInfo
HeapDestroy
SetStdHandle
HeapReAlloc
GetCurrentProcess
TlsFree
lstrcmpA
VirtualFree
GetLocaleInfoA
GetVersionExW
WriteConsoleA
SetHandleCount
GetStartupInfoW
FindResourceW
GetCommandLineW
GetFileAttributesW
LocalAlloc
GetTickCount
lstrlenW
user32
GetParent
GetDlgItemTextW
TranslateMessage
SystemParametersInfoW
GetWindowRect
LoadCursorW
RegisterClassExW
PeekMessageW
SetWindowTextW
GetDlgItem
BeginPaint
DestroyWindow
EndPaint
GetClientRect
MapWindowPoints
DispatchMessageW
MessageBoxW
GetWindow
SetWindowPos
GetDC
GetClassInfoExW
SetCapture
SetDlgItemTextW
GetWindowTextLengthW
CreateWindowExW
GetWindowInfo
EndDialog
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
msvfw32
ICInfo
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ole32
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ