Static task
static1
Behavioral task
behavioral1
Sample
a2996d625fe44c14b1a8c0d806cac666_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a2996d625fe44c14b1a8c0d806cac666_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a2996d625fe44c14b1a8c0d806cac666_JaffaCakes118
-
Size
184KB
-
MD5
a2996d625fe44c14b1a8c0d806cac666
-
SHA1
b68bd3e67c6f70a7952a4af0886d6c8d23c47020
-
SHA256
9f27d6ea44c51e58a7d67f7277cd3a18f14e71a8b4d2691a87ece24df5701038
-
SHA512
5c1ef7c1b81079b101df11dc628290d53824a38fb3b125e059da4901a0d7bea9d52e64dcc1a0e2e1b5dda8640fe1bd459baef610294aa24380d58f7a32555807
-
SSDEEP
3072:CdVZm18i59LCoQlofa63eKYDTylvOymK2sVNZO0iFtuVPoeiNElywB1mG:CdVZmC+hsoxeKYDTylvOymD0iFMVweiS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2996d625fe44c14b1a8c0d806cac666_JaffaCakes118
Files
-
a2996d625fe44c14b1a8c0d806cac666_JaffaCakes118.exe windows:4 windows x86 arch:x86
d6afbfc7ab2b84e2c00e055e209fb52a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize
shell32
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
user32
GetWindow
MapWindowPoints
GetWindowTextLengthW
GetParent
DestroyWindow
SetWindowTextW
RegisterClassExW
CreateWindowExW
SystemParametersInfoW
SetCapture
DispatchMessageW
GetClassInfoExW
GetDlgItem
SetDlgItemTextW
GetClientRect
GetWindowRect
GetWindowInfo
GetDlgItemTextW
LoadCursorW
MessageBoxW
GetDC
BeginPaint
EndPaint
SetWindowPos
TranslateMessage
PeekMessageW
EndDialog
kernel32
HeapDestroy
CopyFileW
GetTickCount
SetFilePointer
GetFileSize
FlushFileBuffers
GetVersionExW
GetVersionExA
GetConsoleCP
WriteConsoleW
WritePrivateProfileSectionW
GetModuleFileNameA
WaitForSingleObject
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCommandLineW
LeaveCriticalSection
GetLastError
WriteConsoleInputVDMA
GetCPInfo
TlsGetValue
FlushInstructionCache
GetCurrentProcessId
InterlockedExchange
GetModuleFileNameW
GetProcessHandleCount
HeapFree
RtlUnwind
HeapSize
lstrcmpiW
LCMapStringW
GetProcessHeap
SizeofResource
CreateFileA
ExitProcess
DeleteCriticalSection
GetOEMCP
LocalFree
GetEnvironmentStrings
IsDebuggerPresent
GetACP
GetStringTypeW
GetProcAddress
GetVersion
EnumResourceNamesA
LocalAlloc
HeapAlloc
SetStdHandle
LoadLibraryExW
TlsAlloc
InterlockedIncrement
GetModuleHandleA
CloseHandle
FindResourceW
TlsSetValue
CreateFileW
GetConsoleMode
GetStdHandle
GetThreadLocale
LoadLibraryW
VirtualFree
GetDriveTypeW
WriteFile
GetSystemDirectoryW
InterlockedCompareExchange
QueryPerformanceCounter
HeapReAlloc
FreeEnvironmentStringsA
lstrlenA
GetStartupInfoA
LCMapStringA
GetCurrentThreadId
FreeEnvironmentStringsW
HeapCreate
CreateSemaphoreW
VirtualAlloc
TlsFree
LoadResource
lstrcmpA
WideCharToMultiByte
LockResource
GetFileType
MulDiv
DeleteFileW
ReadFile
FreeLibrary
GetStringTypeA
UnhandledExceptionFilter
SetHandleCount
InitializeCriticalSection
CreateFileMappingW
LoadLibraryA
InterlockedDecrement
Sleep
GetConsoleOutputCP
GetEnvironmentStringsW
GetCurrentProcess
CreateProcessW
GetModuleHandleW
RaiseException
GetStartupInfoW
SetUnhandledExceptionFilter
GetFileAttributesW
GetCommandLineA
IsProcessorFeaturePresent
WriteConsoleA
SetLastError
lstrlenW
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ