Static task
static1
Behavioral task
behavioral1
Sample
acb0e4a3b9de19d3009de739040c950c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
acb0e4a3b9de19d3009de739040c950c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
acb0e4a3b9de19d3009de739040c950c_JaffaCakes118
-
Size
55KB
-
MD5
acb0e4a3b9de19d3009de739040c950c
-
SHA1
4075622c47e5390cfd3a38b7e586edb720b2027e
-
SHA256
514d92200a2afb636a89e1f387a8ccd65d046049ce680515f1367b8158c1e7ad
-
SHA512
d587f503a25cbf9ee2a35963635c1793e77187dbc38ee74013f5f4ea7665b1d8b1b96456e7ae4fd0952000a24253b0aa8f7c7aac2b399394c016bd3bd134493f
-
SSDEEP
768:0NvAimjLUHwKd4K4Mjb4dISwaak0xeDXGQlafvKmz/sC0Lz+cN3N:0+1LUbdRJb42xeD2o0Jto+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acb0e4a3b9de19d3009de739040c950c_JaffaCakes118
Files
-
acb0e4a3b9de19d3009de739040c950c_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a6842d0532658b2ae90d0c10679371a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCommState
OpenSemaphoreA
BeginUpdateResourceW
MoveFileExA
GetTickCount
VirtualAlloc
SetConsoleMenuClose
AddConsoleAliasW
GetPrivateProfileStringA
SwitchToThread
BeginUpdateResourceA
GetFileAttributesW
SetVolumeLabelW
AddConsoleAliasA
SetCommTimeouts
IsProcessorFeaturePresent
IsBadHugeWritePtr
HeapSummary
SetThreadLocale
SetConsoleNumberOfCommandsW
GetModuleFileNameA
GetPrivateProfileStructW
DebugBreak
WaitNamedPipeW
WaitNamedPipeA
GetConsoleCommandHistoryLengthW
EnumSystemLocalesA
GlobalAddAtomA
user32
SetMenu
ShowWindow
SetClipboardViewer
DefDlgProcW
DdeQueryStringW
RegisterClipboardFormatW
GetMenuStringA
CheckMenuItem
IsIconic
SetPropW
GetMessagePos
VkKeyScanExW
LoadImageW
EnumPropsA
CopyIcon
CascadeWindows
CreateMDIWindowA
CreateDialogIndirectParamW
CharLowerA
SetParent
IsDlgButtonChecked
ShowScrollBar
DdeKeepStringHandle
DdeUnaccessData
DdeDisconnect
DialogBoxIndirectParamA
EnableScrollBar
gdi32
DrawEscape
ExtEscape
GdiConvertAndCheckDC
AngleArc
GdiConvertDC
GdiCleanCacheDC
GetStockObject
EnumFontsA
GetTextFaceW
Escape
ExtCreateRegion
GdiQueryFonts
GdiConvertPalette
GdiEntry5
GetBrushOrgEx
SelectBrushLocal
GetPath
CreateSolidBrush
GetETM
CloseMetaFile
CreateBitmapIndirect
FrameRgn
GetWorldTransform
GetCharWidth32A
GetEnhMetaFilePaletteEntries
StartPage
GdiGetLocalFont
SetAbortProc
UpdateICMRegKeyA
GdiConvertBitmap
RectVisible
GdiGetCodePage
GetCharABCWidthsW
GetMetaRgn
GetICMProfileW
GetEnhMetaFileHeader
SetICMProfileW
GetEnhMetaFilePixelFormat
GetViewportExtEx
GetObjectType
GdiGetCharDimensions
OffsetWindowOrgEx
ole32
ReadClassStm
OleFlushClipboard
OleCreateLink
GetErrorInfo
HACCEL_UserSize
IsAccelerator
HBITMAP_UserFree
OleCreateLinkToFileEx
StgOpenAsyncDocfileOnIFillLockBytes
WdtpInterfacePointer_UserSize
CoCreateFreeThreadedMarshaler
HMETAFILE_UserMarshal
OleSave
CoFreeAllLibraries
CoGetTreatAsClass
OleInitializeWOW
CLIPFORMAT_UserFree
RevokeDragDrop
CoLoadLibrary
GetHookInterface
SetDocumentBitStg
HMETAFILE_UserUnmarshal
OleNoteObjectVisible
OleLoad
CoCreateInstance
CoRevokeMallocSpy
STGMEDIUM_UserMarshal
CreateFileMoniker
StgGetIFillLockBytesOnFile
Sections
.idata Size: 5KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: 19KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 25KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ