Static task
static1
Behavioral task
behavioral1
Sample
a6c105b1657ee8d3c2f7f504a87db46b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a6c105b1657ee8d3c2f7f504a87db46b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a6c105b1657ee8d3c2f7f504a87db46b_JaffaCakes118
-
Size
1.4MB
-
MD5
a6c105b1657ee8d3c2f7f504a87db46b
-
SHA1
c2b2c8282503a26b41cfcb8dc91312e2ed273b85
-
SHA256
471380bf8593d3146e708b9a497a4e145c998ae68f5cd7cd5c54cdbbd3a4c559
-
SHA512
43a2f99b5b037c635afba0f45427e9d9850ecb545017ad392a53c063367dd184cb6a966f293aeb02e58c0ff3a15b98061f6b48e56da9070a3e778da55e27a9ac
-
SSDEEP
24576:hl/E/A7eFTHxql9Qu2NDOEmIdYutE6NQMYTWBLhbaLkxXo2RDLh:OFTHxql2OEnk6vOW3FB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6c105b1657ee8d3c2f7f504a87db46b_JaffaCakes118
Files
-
a6c105b1657ee8d3c2f7f504a87db46b_JaffaCakes118.exe windows:1 windows x86 arch:x86
11f1bdc90e41a2fd75441da02a58d1c8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegCloseKey
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
ole32
CoInitialize
CoUninitialize
gdi32
BitBlt
CreateCompatibleDC
CreateFontA
CreatePalette
CreateSolidBrush
DeleteDC
DeleteObject
ExtTextOutA
GetDeviceCaps
GetObjectA
GetStockObject
GetTextExtentPoint32A
GetTextFaceA
GetTextMetricsA
RealizePalette
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetTextColor
StretchDIBits
TextOutA
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateThread
FindResourceA
FreeLibrary
FreeResource
GetCommandLineA
GetDriveTypeA
GetExitCodeProcess
GetFileSize
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
LoadResource
LockResource
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ReleaseMutex
SetFilePointer
Sleep
TerminateThread
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
CloseHandle
CreateEventA
CreateFileA
CreateMutexA
CreateThread
DeleteFileA
ExitProcess
ExitThread
GetCommandLineA
GetConsoleMode
GetCurrentProcessId
GetCurrentThreadId
GetCurrentThread
GetEnvironmentStrings
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStdHandle
GetVersion
LoadLibraryA
ReadConsoleInputA
ReadFile
ReleaseMutex
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEvent
SetFilePointer
SetStdHandle
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualAlloc
VirtualFree
WaitForSingleObject
WriteConsoleA
WriteFile
user32
AdjustWindowRect
BeginPaint
CallWindowProcA
ClientToScreen
ClipCursor
CreateAcceleratorTableA
CreateWindowExA
DefWindowProcA
DestroyAcceleratorTable
DestroyWindow
DispatchMessageA
DrawMenuBar
DrawTextA
EnableWindow
EndPaint
FillRect
FlashWindow
FrameRect
GetAsyncKeyState
GetClientRect
GetCursorPos
GetDC
GetDlgItem
GetFocus
GetMenu
GetMenuItemInfoA
GetMessagePos
GetParent
GetPropA
GetSysColor
GetSystemMetrics
GetWindowLongA
GetWindowRect
GetWindowTextA
IntersectRect
InvalidateRect
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadImageA
LoadMenuA
LoadStringA
MessageBeep
MessageBoxA
MoveWindow
OffsetRect
PeekMessageA
PostQuitMessage
PostThreadMessageA
RegisterClassA
RegisterWindowMessageA
ReleaseDC
RemovePropA
ScreenToClient
SendMessageA
SetActiveWindow
SetClassLongA
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetPropA
SetRect
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowCursor
ShowWindow
TranslateAcceleratorA
TranslateMessage
UpdateWindow
WaitMessage
wvsprintfA
GetActiveWindow
wsprintfA
winmm
auxGetDevCapsA
auxGetNumDevs
auxGetVolume
auxSetVolume
joyGetDevCapsA
joyGetNumDevs
joyGetPosEx
mciGetErrorStringA
mciSendCommandA
mciSendStringA
mixerGetControlDetailsA
mixerGetDevCapsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetNumDevs
mixerSetControlDetails
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetTime
dsound
DirectSoundCreate
comctl32
ord17
dinput
DirectInputCreateA
dplayx
ord2
ord1
ddraw
DirectDrawCreate
Sections
BEGTEXT Size: 565KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DGROUP Size: 41KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 5.2MB - Virtual size:
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 34KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 706KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ODGROUP Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE