Static task
static1
Behavioral task
behavioral1
Sample
8e636805a6b3b673500b0ab52c802520_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8e636805a6b3b673500b0ab52c802520_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8e636805a6b3b673500b0ab52c802520_JaffaCakes118
-
Size
800KB
-
MD5
8e636805a6b3b673500b0ab52c802520
-
SHA1
bd0af24a83895504bf2355aadd2d3be2bff9463f
-
SHA256
50c7cc5aad3332f240cfc2d0ddcaa75110851479bb8a375324d75dfc4c2bcbf0
-
SHA512
b782c94f2dde28bbcd8ab09d200d48e496123c7c9c21c240bf2711577e920b67171378a152f84d1a87f13647c406adc882b5fc43b930175abe6f661c36ef0068
-
SSDEEP
12288:lbwfTw2yZ6UjA+4ZDBs9a5EObXAiZGxiFeogyMwycINlBoMqRXLQ3U5T3y3G8g17:lbwLwf6HHsKtpEeeoacU+RXLtN1qM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e636805a6b3b673500b0ab52c802520_JaffaCakes118
Files
-
8e636805a6b3b673500b0ab52c802520_JaffaCakes118.exe windows:4 windows x86 arch:x86
2f0343cbc9a8660526c8fce27563a5ef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
CreateUrlCacheEntryA
HttpOpenRequestA
InternetCrackUrlW
InternetQueryOptionA
HttpSendRequestExA
InternetAutodial
FindFirstUrlCacheGroup
InternetSetDialStateA
kernel32
GetCurrencyFormatW
DeleteCriticalSection
WideCharToMultiByte
GetProcAddress
UnhandledExceptionFilter
GetCurrentProcessId
WaitForMultipleObjects
GetVolumeInformationA
SetCurrentDirectoryA
WaitForMultipleObjectsEx
GetEnvironmentVariableW
SetFilePointer
WriteFile
WritePrivateProfileStructA
GetConsoleMode
MoveFileExW
GetSystemDirectoryA
InitializeCriticalSection
LoadLibraryA
GetCurrentThread
FreeLibrary
GetStdHandle
SetConsoleCP
HeapFree
CompareStringW
LocalHandle
CreateMutexA
CreateFileA
QueryPerformanceCounter
GetCurrentThreadId
EnterCriticalSection
EnumResourceNamesW
HeapDestroy
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
InterlockedIncrement
GetTimeZoneInformation
GetLastError
SetEnvironmentVariableA
HeapReAlloc
Sleep
HeapAlloc
IsValidLocale
SetHandleCount
ExpandEnvironmentStringsW
ExitProcess
GetAtomNameA
DeleteFiber
FlushFileBuffers
GetLocaleInfoA
GetExitCodeProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
GetModuleFileNameW
VirtualAlloc
EnumTimeFormatsA
GetStringTypeA
OpenMutexA
GetTimeFormatA
TlsGetValue
VirtualLock
GetCommandLineW
GetCPInfo
CloseHandle
DosDateTimeToFileTime
LeaveCriticalSection
SetStdHandle
GetEnvironmentStringsW
GetStartupInfoW
GetStringTypeExA
FormatMessageA
LCMapStringA
VirtualUnlock
HeapSize
GetConsoleCP
SetVolumeLabelA
LoadModule
GetComputerNameA
LCMapStringW
ReadConsoleW
GetSystemTimeAsFileTime
RtlUnwind
GetProcAddress
TlsAlloc
GetFileAttributesA
CompareStringA
GetUserDefaultLCID
TlsSetValue
GetFileType
GetLocaleInfoW
GlobalLock
EnumSystemLocalesA
lstrlenA
IsBadReadPtr
GetModuleHandleA
CreatePipe
GetStringTypeW
DeleteAtom
MultiByteToWideChar
FreeEnvironmentStringsW
WritePrivateProfileStructW
InterlockedDecrement
VirtualQuery
WriteConsoleA
GetACP
DebugActiveProcess
GetTickCount
IsValidCodePage
GetStartupInfoA
SetLastError
WriteConsoleW
ReadFile
InterlockedExchange
GetModuleHandleW
UnlockFileEx
GetModuleFileNameA
GetVersionExA
VirtualFree
TerminateProcess
TlsFree
GetConsoleOutputCP
GetThreadPriorityBoost
GetDateFormatA
GetOEMCP
GetCommandLineA
FindResourceExW
HeapCreate
GetCurrentDirectoryA
comctl32
ImageList_Write
ImageList_AddIcon
ImageList_GetBkColor
ImageList_LoadImageW
DrawStatusText
ImageList_DragShowNolock
InitCommonControlsEx
ImageList_AddMasked
GetEffectiveClientRect
MakeDragList
ImageList_Duplicate
ImageList_Add
user32
DdeAbandonTransaction
GetAsyncKeyState
CreateWindowExA
GetScrollPos
MapDialogRect
RegisterClassA
SetClassLongW
DefWindowProcW
DdeKeepStringHandle
DestroyWindow
DdeQueryStringW
ClientToScreen
LoadCursorW
ShowWindow
EndDialog
TrackPopupMenu
DdeDisconnect
DdeSetQualityOfService
DlgDirSelectExA
ShowScrollBar
GetSystemMetrics
ReleaseCapture
GetMessageW
MessageBoxA
RegisterClassExA
Sections
.text Size: 228KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ