Static task
static1
Behavioral task
behavioral1
Sample
8ce57566aa224e83a79cb67e34209fc9_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8ce57566aa224e83a79cb67e34209fc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8ce57566aa224e83a79cb67e34209fc9_JaffaCakes118
-
Size
300KB
-
MD5
8ce57566aa224e83a79cb67e34209fc9
-
SHA1
ded4776c9be14c41fa87d684cbbb10d3b65cceaa
-
SHA256
dd5d6b756c8bc14de88b02a30fc17d6750d2adc1f9cf177d84c0e36a47141195
-
SHA512
a6f0f5b650bde3f1f3087aa83b33cc6d443155eca463b2be3ebb0c5350754a3c1edbeb31e41fcc444aee01fb2bda1b8a044cf1b1133280305b69390577c5476a
-
SSDEEP
6144:HmCXrg1Ggr0qbQttYefjtuNk26x5ceIYiFnQWTgeyHecrARX6u:H77g1GgwqblNk26h1WDcrC7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ce57566aa224e83a79cb67e34209fc9_JaffaCakes118
Files
-
8ce57566aa224e83a79cb67e34209fc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c098b1d5fac81f3cee8459ff197d19b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LoadResource
FindResourceA
WideCharToMultiByte
GetLastError
lstrlenA
GetShortPathNameA
lstrcpynA
IsDBCSLeadByte
lstrcmpiA
GetCurrentThreadId
GetCommandLineA
InitializeCriticalSection
LoadLibraryExA
CreateMutexA
DeleteCriticalSection
CopyFileA
GetCurrentProcess
lstrlenW
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
WriteFile
CreateFileA
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
CloseHandle
GetWindowsDirectoryA
GetModuleHandleA
GetModuleFileNameA
GetVersionExA
GetSystemDefaultLCID
GetLocaleInfoA
lstrcpyA
lstrcatA
InterlockedIncrement
GetUserDefaultLangID
HeapDestroy
GetEnvironmentVariableA
HeapSize
TerminateProcess
LCMapStringW
LCMapStringA
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
GetStartupInfoA
RaiseException
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
LocalFree
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
InterlockedDecrement
SetStdHandle
GetStringTypeW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
IsBadReadPtr
IsBadCodePtr
SetFilePointer
HeapCreate
ReadFile
FlushFileBuffers
user32
DefWindowProcA
wsprintfA
RegisterClassA
EndDialog
EnumChildWindows
GetDlgItem
SendMessageA
CharNextA
PostThreadMessageA
DispatchMessageA
GetMessageA
PostMessageA
CreateWindowExA
GetSystemMenu
LoadIconA
SetForegroundWindow
FindWindowA
PostQuitMessage
EnableWindow
GetDlgCtrlID
EnumDisplaySettingsA
SetWindowTextA
WinHelpA
LoadStringA
GetWindowRect
EnableMenuItem
GetParent
SetWindowLongA
CallWindowProcA
DialogBoxParamA
advapi32
RegOpenKeyA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
ole32
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoUninitialize
CoSuspendClassObjects
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance
oleaut32
VariantClear
SysFreeString
RegisterTypeLi
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
VarUI4FromStr
LoadTypeLi
comctl32
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
hccutils
FindDeviceByNameAndClass
IsDisplayValid
LoadDialogString
EnumDeviceByClass
GetAttachedMonitorDevice
FindResources
LoadSTRING
GetDisplayDevice
GetCUIDriverFromClassDevice
ReleaseClassDevice
Sections
.text Size: 96KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ