Static task
static1
Behavioral task
behavioral1
Sample
a1d721c44fe8cba2d2e4c868c8f91d2e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a1d721c44fe8cba2d2e4c868c8f91d2e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a1d721c44fe8cba2d2e4c868c8f91d2e_JaffaCakes118
-
Size
376KB
-
MD5
a1d721c44fe8cba2d2e4c868c8f91d2e
-
SHA1
6b25e5676484182ace380d406cb0e208e5356ea9
-
SHA256
be1f9499c30b2421b6b334dcf555cba426e249ccf617700e8e2f0b1a84c48d04
-
SHA512
1500c1a6b197150b8c32d4f362cc9befb87777e745f7d90297fbc53490228431e62c0016abafbd204f435085e674007e70d56781afd643feae416573f8b46d86
-
SSDEEP
6144:S9upWwt2AoTqRFA+z6hfyHlT9XvCRlFt1nFN1hSjmspsJhEWIgvj:f3DRFF6kJMTXhS1pszEWz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1d721c44fe8cba2d2e4c868c8f91d2e_JaffaCakes118
Files
-
a1d721c44fe8cba2d2e4c868c8f91d2e_JaffaCakes118.exe windows:4 windows x86 arch:x86
eff1c1d37269da21509cac25a35fbc5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
GetMenuItemCount
DlgDirListA
MessageBoxA
CreateDialogIndirectParamA
TranslateAcceleratorA
RegisterClassExA
TrackPopupMenu
GrayStringA
RegisterClassA
LoadImageW
GetWindowThreadProcessId
LoadAcceleratorsW
SetDebugErrorLevel
GetPropA
EnableScrollBar
wininet
InternetGetConnectedStateExW
IncrementUrlCacheHeaderData
FindFirstUrlCacheContainerA
InternetSecurityProtocolToStringA
InternetReadFileExA
kernel32
GetConsoleCP
VirtualAlloc
GetCurrentProcess
VirtualFree
GetCPInfo
ReadFile
UnhandledExceptionFilter
OpenMutexA
GetStringTypeW
SetLastError
GetOEMCP
GetConsoleMode
CompareStringA
FreeEnvironmentStringsA
WriteConsoleA
SetEnvironmentVariableA
GetUserDefaultLCID
GetCurrentThread
TlsSetValue
HeapCreate
MultiByteToWideChar
GetFileType
GetStringTypeExW
SetHandleCount
GetProfileIntA
GetStringTypeA
GetModuleFileNameA
GetLocaleInfoA
GetNamedPipeHandleStateA
TlsFree
TerminateProcess
GetTimeFormatA
GetCurrentThreadId
CloseHandle
GetPrivateProfileSectionW
SetStdHandle
GetConsoleOutputCP
HeapAlloc
GetTickCount
lstrcatA
SetUnhandledExceptionFilter
GetACP
LocalUnlock
GetCompressedFileSizeW
GetProcAddress
SetConsoleCtrlHandler
ExitProcess
GetCommandLineA
LeaveCriticalSection
lstrcmp
GetLocaleInfoW
HeapSize
CreateFileA
InterlockedExchange
lstrcmpA
CreateEventA
WritePrivateProfileSectionA
GetStartupInfoA
WriteConsoleW
Sleep
IsDebuggerPresent
SetPriorityClass
EnterCriticalSection
FreeEnvironmentStringsW
TlsAlloc
FormatMessageA
GetEnvironmentStringsW
GetCurrentProcessId
IsValidLocale
HeapFree
GetDateFormatA
GetEnvironmentStrings
LCMapStringA
WriteFile
QueryPerformanceCounter
VirtualQueryEx
CompareStringW
GetTimeZoneInformation
GetModuleHandleA
FreeLibrary
SetFilePointer
GetProcessAffinityMask
TlsGetValue
InitializeCriticalSectionAndSpinCount
HeapDestroy
GetSystemTimeAsFileTime
InterlockedDecrement
RtlUnwind
GetModuleHandleW
FlushFileBuffers
EnumSystemLocalesA
InterlockedIncrement
HeapReAlloc
LoadLibraryA
WideCharToMultiByte
GetLogicalDriveStringsW
VirtualQuery
GetStdHandle
CreateMutexA
IsValidCodePage
LocalFlags
DeleteCriticalSection
GetLastError
LCMapStringW
advapi32
RegRestoreKeyA
CryptSignHashW
LookupSecurityDescriptorPartsW
RegReplaceKeyA
InitiateSystemShutdownA
LookupSecurityDescriptorPartsA
CryptHashData
LogonUserW
CryptCreateHash
CryptEnumProvidersW
CryptReleaseContext
RegSaveKeyW
RegOpenKeyExW
CryptSetProviderA
CreateServiceA
RegQueryInfoKeyW
CryptSetKeyParam
RegSaveKeyA
CryptSetProviderW
RegCreateKeyW
Sections
.text Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ