Static task
static1
Behavioral task
behavioral1
Sample
a243e89ce11d0f3716cdea4c7659f9e5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a243e89ce11d0f3716cdea4c7659f9e5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a243e89ce11d0f3716cdea4c7659f9e5_JaffaCakes118
-
Size
479KB
-
MD5
a243e89ce11d0f3716cdea4c7659f9e5
-
SHA1
6b319da9d11daa6c116cd698020e549274e8c02e
-
SHA256
428c109f6b305bac4d05a0a95e40d7cc60f3dcfcebb4b06ff02474893c739b6f
-
SHA512
9fd5ca7bc507baa25d4a6f89af010ba84de7c99973956161bdcf2294a17a618463ce60de42a09756063f9c34affb3cb50ee279dde7bcfd465dc67d9c8c6830b7
-
SSDEEP
12288:adBQEWGz5hJ34UgUWDtZYOH5reh4JKLx9LKl8D3IIj:adBcG9oUgRDtZ59e2JMXml0IIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a243e89ce11d0f3716cdea4c7659f9e5_JaffaCakes118
Files
-
a243e89ce11d0f3716cdea4c7659f9e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
fbe98ede2b0af1e4bf74545490831259
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetUserDefaultLCID
GetCPInfo
LoadLibraryA
InterlockedDecrement
DeleteCriticalSection
MultiByteToWideChar
VirtualFree
TlsAlloc
GetTimeZoneInformation
GetConsoleMode
WriteProfileStringW
GetCurrentThreadId
SetConsoleTitleW
GetStartupInfoW
ExitProcess
IsDebuggerPresent
QueryPerformanceCounter
GetCommandLineW
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
TlsFree
EnumResourceNamesW
WriteConsoleW
GetFullPathNameW
CreatePipe
GetLocalTime
GetPrivateProfileSectionNamesA
IsValidCodePage
CreateEventW
lstrcat
CompareStringA
GetFileType
CloseHandle
GetStringTypeW
HeapCreate
Sleep
SetHandleCount
GetStdHandle
GetLocaleInfoW
GetCurrentProcessId
GetEnvironmentStrings
GetProcessHeap
FlushFileBuffers
TerminateProcess
GetTimeFormatA
UnhandledExceptionFilter
VirtualQuery
GetModuleFileNameW
CreateFileA
LeaveCriticalSection
GetConsoleOutputCP
CreateFileMappingA
ReadFile
HeapSize
GetConsoleCP
IsValidLocale
GetACP
WriteFile
LCMapStringA
SetConsoleCtrlHandler
GetLocaleInfoA
TlsSetValue
LockFileEx
GetStringTypeA
WriteConsoleA
GetStartupInfoA
GetVersionExA
LCMapStringW
InterlockedExchange
HeapFree
SetStdHandle
GetSystemTimeAsFileTime
CompareStringW
HeapReAlloc
GetProcAddress
GetCurrentProcess
ReleaseSemaphore
SetFilePointer
SetLastError
OpenMutexA
GlobalAddAtomW
TlsGetValue
FreeEnvironmentStringsW
FreeEnvironmentStringsA
EnumSystemLocalesW
GetOEMCP
EnterCriticalSection
GetEnvironmentStringsW
FreeLibrary
SetEnvironmentVariableA
HeapAlloc
GetCommandLineA
RtlUnwind
lstrcatW
CreateMutexA
InterlockedIncrement
EnumSystemLocalesA
SetUnhandledExceptionFilter
GetLastError
HeapDestroy
GetCurrentThread
VirtualAlloc
GetModuleHandleA
GetModuleFileNameA
InitializeCriticalSection
GetDateFormatA
comctl32
InitCommonControlsEx
user32
ChildWindowFromPointEx
EnumDisplayDevicesA
CharUpperBuffW
EnumDesktopWindows
CheckRadioButton
CharUpperBuffA
GetMenuDefaultItem
GetWindowPlacement
ShowWindow
BroadcastSystemMessageA
GetThreadDesktop
UnhookWindowsHookEx
MessageBoxA
SendNotifyMessageA
CreateWindowStationW
GetWindowLongW
GetWindowDC
GetMenuItemInfoA
SetWindowsHookW
RegisterClassExA
ShowOwnedPopups
SwitchToThisWindow
SystemParametersInfoA
DefMDIChildProcA
RegisterClassA
CreateWindowExA
IsWindow
Sections
.text Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ