Static task
static1
Behavioral task
behavioral1
Sample
974e1806044085f6cbdaf14b402c0f45_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
974e1806044085f6cbdaf14b402c0f45_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
974e1806044085f6cbdaf14b402c0f45_JaffaCakes118
-
Size
612KB
-
MD5
974e1806044085f6cbdaf14b402c0f45
-
SHA1
31fd8dbff4668b830e7fb05ba7880fe8a985841a
-
SHA256
7047f9d4b7e1c2250ab8982a0906ffde807a4cded9611c4529c09d3850ca7cb6
-
SHA512
6b798ee9f719c63349578a799f6f8439f01f65a8532a8cb73c6bb3497b77e14db0a9bf759fb34af7cbb42cfecdae1b976288c0ffc376dd47c346d31d3d533f9a
-
SSDEEP
12288:oK+IqOXxTX3U4T0RFVbMdGo2jdWF3WZBG4QhS/X6xprBVj+O7:ACB78Mso2ZECBGw6xprBx+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 974e1806044085f6cbdaf14b402c0f45_JaffaCakes118
Files
-
974e1806044085f6cbdaf14b402c0f45_JaffaCakes118.exe windows:4 windows x86 arch:x86
feb187b2dd0cd4b8bcccf4a3a65f7b45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
CreateUrlCacheContainerW
InternetGetCertByURL
InternetUnlockRequestFile
FindNextUrlCacheContainerW
comctl32
ImageList_BeginDrag
ImageList_Read
GetEffectiveClientRect
ImageList_GetBkColor
ImageList_EndDrag
CreateUpDownControl
MakeDragList
InitCommonControlsEx
ImageList_Merge
kernel32
DeleteAtom
ExitProcess
ReadFile
OpenMutexA
CompareStringW
GetLocaleInfoW
EnterCriticalSection
GetModuleHandleW
HeapSize
IsValidCodePage
LoadLibraryA
GetLastError
LCMapStringW
GetUserDefaultLCID
FlushFileBuffers
CreateFileA
TlsAlloc
SetEvent
GetPriorityClass
FindResourceW
SetFilePointer
GetEnvironmentStrings
LCMapStringA
CompareStringA
UnhandledExceptionFilter
GetStdHandle
GetStartupInfoA
GetCurrentThreadId
HeapCreate
GetConsoleCP
LocalCompact
WriteConsoleA
HeapAlloc
GetSystemTimeAsFileTime
SetEnvironmentVariableA
GetStringTypeW
MultiByteToWideChar
GetDateFormatA
GetCommandLineA
IsValidLocale
InterlockedIncrement
CreateDirectoryW
FreeEnvironmentStringsW
QueryPerformanceCounter
GlobalReAlloc
SetConsoleCtrlHandler
TlsGetValue
HeapDestroy
GetThreadContext
SetFileAttributesA
TerminateProcess
GetOEMCP
GetCurrentProcessId
GetStringTypeA
VirtualAlloc
GetCurrentThread
EnumSystemLocalesA
GetModuleFileNameA
CreateMutexA
GetEnvironmentStringsW
TlsSetValue
FreeEnvironmentStringsA
GetCPInfo
GetTickCount
SetHandleCount
GetFileType
WriteProfileStringA
CloseHandle
InterlockedDecrement
SetConsoleActiveScreenBuffer
InitializeCriticalSectionAndSpinCount
GetProcAddress
VirtualQuery
WideCharToMultiByte
GetTimeZoneInformation
TlsFree
SetLastError
GetLocaleInfoA
DeleteCriticalSection
HeapFree
IsDebuggerPresent
GetConsoleMode
VirtualFree
RtlUnwind
WriteFile
GetCurrentProcess
GetConsoleOutputCP
GetTimeFormatA
GetFileTime
SetUnhandledExceptionFilter
HeapReAlloc
FreeLibrary
WriteConsoleW
SetStdHandle
Sleep
SetConsoleCP
GetACP
GetModuleHandleA
InterlockedExchange
LeaveCriticalSection
GetEnvironmentVariableA
user32
GetDoubleClickTime
CallMsgFilter
GetPriorityClipboardFormat
GetScrollRange
WaitMessage
EndPaint
RegisterClassA
GetDesktopWindow
SendMessageTimeoutW
GetCaretBlinkTime
VkKeyScanW
RegisterClassExA
LoadKeyboardLayoutA
wsprintfA
InternalGetWindowText
SetCaretPos
SetUserObjectSecurity
GetMenuContextHelpId
EnumWindowStationsW
CreateDialogIndirectParamA
GetClassInfoW
CheckMenuRadioItem
CallMsgFilterW
SetDoubleClickTime
GetKeyboardLayoutList
SetSystemCursor
Sections
.text Size: 192KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ