Static task
static1
Behavioral task
behavioral1
Sample
8d6a322da7440716544451ac90a21db8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8d6a322da7440716544451ac90a21db8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8d6a322da7440716544451ac90a21db8_JaffaCakes118
-
Size
568KB
-
MD5
8d6a322da7440716544451ac90a21db8
-
SHA1
ec6658944235889d8a25597fedaca25c65dd0207
-
SHA256
88c1a9794216ecff11a4a393821e200bb3157db9b495a116f1c554f89e2f2555
-
SHA512
15a37ee0514021a297fa8d6d2b8f93a3dbaca55c418f94efee660f08f10fcd0c7574aa329d99aa49b44a47ed9ba108a2188f6b4bd44461151be35437e827cbf1
-
SSDEEP
12288:zGrrEBlb2zzy64VAq0xJsKctdSF6yOSJdIDEk:qrYBlbWzr4VAq0xzctOOKdI7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d6a322da7440716544451ac90a21db8_JaffaCakes118
Files
-
8d6a322da7440716544451ac90a21db8_JaffaCakes118.exe windows:4 windows x86 arch:x86
683ae5dd2f45f450a9b468959874d812
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderLocation
FindExecutableW
comctl32
ImageList_SetOverlayImage
CreateUpDownControl
ImageList_GetDragImage
ImageList_Merge
CreatePropertySheetPageA
InitCommonControlsEx
DrawInsert
ImageList_AddIcon
MakeDragList
ImageList_GetImageCount
ImageList_Remove
ImageList_SetImageCount
ImageList_Add
CreateStatusWindowW
gdi32
GetBrushOrgEx
PlayEnhMetaFileRecord
GetMiterLimit
CreateFontIndirectA
EnumICMProfilesA
ScaleWindowExtEx
AbortPath
CopyMetaFileW
GetKerningPairsW
SwapBuffers
user32
GetMenuBarInfo
SetWindowsHookExA
GetGuiResources
MessageBoxW
SetScrollInfo
DrawTextExW
wvsprintfW
AppendMenuW
OemToCharA
IsWindowVisible
FrameRect
DlgDirListComboBoxA
DefWindowProcA
PostMessageA
BroadcastSystemMessageW
ShowWindow
MonitorFromRect
GetNextDlgTabItem
DestroyWindow
RegisterClassExA
SetDlgItemTextA
GetTopWindow
DefFrameProcA
CreateWindowExW
CallMsgFilterW
RegisterClassA
ScrollDC
kernel32
HeapCreate
GetSystemTimeAsFileTime
Sleep
InterlockedDecrement
GetExitCodeProcess
GetDateFormatA
FlushFileBuffers
GetConsoleMode
GetEnvironmentStrings
InterlockedIncrement
EnumTimeFormatsW
FreeEnvironmentStringsA
GetConsoleTitleW
SetEnvironmentVariableA
GetACP
GetTimeFormatA
LocalFileTimeToFileTime
WriteConsoleA
GetSystemDirectoryA
IsValidLocale
GlobalCompact
LoadLibraryA
EnumSystemLocalesA
GetCPInfo
UnhandledExceptionFilter
LockFileEx
GetNumberFormatA
FreeLibrary
TlsGetValue
CreateFileA
GetModuleHandleA
GetCurrentProcess
TlsAlloc
GetCurrentProcessId
GetProfileSectionW
GetLastError
OutputDebugStringW
IsValidCodePage
TerminateProcess
SetFilePointer
GetLogicalDrives
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
WaitForMultipleObjectsEx
VirtualQuery
FillConsoleOutputAttribute
GetModuleFileNameA
GetUserDefaultLCID
SetLastError
LCMapStringA
CloseHandle
GlobalUnlock
ExitProcess
GetConsoleCP
WriteConsoleW
TlsSetValue
FreeEnvironmentStringsW
GetConsoleOutputCP
GlobalFree
GetEnvironmentStringsW
HeapReAlloc
CompareStringW
GetProfileStringW
LCMapStringW
GetLocaleInfoA
IsDebuggerPresent
SetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WideCharToMultiByte
GetStringTypeA
WriteFile
SetUnhandledExceptionFilter
GetCommandLineA
ContinueDebugEvent
GetStdHandle
MoveFileW
GetCurrentThreadId
GetFileType
VirtualAlloc
GetTimeZoneInformation
CompareStringA
HeapSize
SetHandleCount
ReadFile
GetCurrentThread
GlobalAlloc
GetStartupInfoA
QueryPerformanceCounter
SetConsoleOutputCP
OpenMutexA
GetOEMCP
LeaveCriticalSection
HeapFree
FlushConsoleInputBuffer
GetLocaleInfoW
GetTickCount
InterlockedExchange
EnterCriticalSection
GetStringTypeW
HeapDestroy
RtlUnwind
TlsFree
GetLogicalDriveStringsW
SetConsoleCtrlHandler
VirtualFree
OpenSemaphoreW
HeapAlloc
CreateMutexA
Sections
.text Size: 168KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ