Static task
static1
Behavioral task
behavioral1
Sample
ad13f33e61fc55a80c0a266fd17cc992_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ad13f33e61fc55a80c0a266fd17cc992_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ad13f33e61fc55a80c0a266fd17cc992_JaffaCakes118
-
Size
421KB
-
MD5
ad13f33e61fc55a80c0a266fd17cc992
-
SHA1
19af4506966be47fbd57e203f789e971190c1d1d
-
SHA256
c689e453aa57d7392367ff027de96619cb2cb5df525265914e3056a883c8dc21
-
SHA512
d369d108d4f714e84e5d9f4e813fde6056d59e68b4f56856c2a5adf47c645d0c0f811ab8af218e0fbbf41eb3ab8e3f9c0ed87061e8688039b41f0d3565369c98
-
SSDEEP
12288:SLsrkXNWRgBcXAHOEbCbzQhfWbduoq8odMLypDMd57:rkXIFSONQhqwoHodMLy67
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad13f33e61fc55a80c0a266fd17cc992_JaffaCakes118
Files
-
ad13f33e61fc55a80c0a266fd17cc992_JaffaCakes118.exe windows:4 windows x86 arch:x86
514400369872d195013425701839aebd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputCharacterA
GetFileType
GlobalAddAtomA
GetVersionExA
GetACP
OpenProcess
HeapAlloc
SetLastError
IsValidCodePage
GetUserDefaultLCID
LeaveCriticalSection
UnhandledExceptionFilter
CommConfigDialogA
WaitForDebugEvent
TlsSetValue
IsDebuggerPresent
TlsFree
GetCurrentThread
GetDateFormatA
GlobalUnfix
InitializeCriticalSectionAndSpinCount
FindNextFileW
GetEnvironmentStringsW
CompareStringA
SetStdHandle
GetLocaleInfoW
LCMapStringW
GetCommandLineW
GetProcAddress
GetCalendarInfoW
GetCPInfo
SetEnvironmentVariableA
IsValidLocale
VirtualFree
GlobalGetAtomNameA
GetModuleFileNameW
VirtualQuery
GetTimeZoneInformation
SetConsoleCtrlHandler
HeapDestroy
GetFileSize
GetOEMCP
LCMapStringA
FreeLibrary
HeapReAlloc
GetTimeFormatA
ExitProcess
LocalLock
WriteFile
VirtualAlloc
SetHandleCount
QueryPerformanceCounter
GetCurrentProcess
GetStdHandle
GetModuleHandleA
EnterCriticalSection
GetStartupInfoA
GetStartupInfoW
GetCurrentThreadId
HeapSize
Sleep
GetThreadContext
EnumSystemLocalesA
GetCurrentProcessId
TlsGetValue
GetStringTypeA
GetThreadSelectorEntry
OpenWaitableTimerW
GetTickCount
GetLocaleInfoA
ExitThread
DeleteCriticalSection
InterlockedDecrement
HeapCreate
RtlUnwind
CompareStringW
GetSystemTimeAsFileTime
InterlockedExchange
GetStringTypeW
SetConsoleTitleW
CreateDirectoryExA
FreeEnvironmentStringsW
TlsAlloc
GetLastError
GetModuleHandleW
HeapFree
TerminateProcess
LoadLibraryA
lstrcat
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameW
GetModuleFileNameA
InterlockedIncrement
LocalUnlock
SetUnhandledExceptionFilter
InterlockedCompareExchange
gdi32
GetRasterizerCaps
CreateCompatibleDC
GetFontLanguageInfo
GetGraphicsMode
GetMetaFileW
GdiSetBatchLimit
IntersectClipRect
CreateICW
SelectObject
CreateScalableFontResourceA
GetWindowOrgEx
GetViewportExtEx
SelectClipPath
CloseFigure
SetMetaFileBitsEx
GetCharABCWidthsW
wininet
GetUrlCacheEntryInfoExW
FtpOpenFileA
SetUrlCacheConfigInfoW
IsUrlCacheEntryExpiredW
InternetShowSecurityInfoByURL
InternetSetOptionA
InternetQueryFortezzaStatus
InternetConnectW
InternetSetDialStateW
SetUrlCacheEntryInfoW
InternetGoOnlineW
GetUrlCacheEntryInfoW
UnlockUrlCacheEntryFileW
FtpDeleteFileA
InternetCreateUrlW
user32
SendIMEMessageExA
InvalidateRgn
GrayStringA
SetRectEmpty
ScrollDC
WINNLSGetEnableStatus
DragObject
PostQuitMessage
DdeGetLastError
SetClassWord
CharPrevW
LoadMenuW
CreateDialogIndirectParamW
SetWindowTextW
MessageBoxA
GetScrollInfo
GetPropA
SendMessageW
EnableWindow
LoadCursorW
SendMessageTimeoutA
ChangeMenuA
GetPropW
RemovePropA
Sections
.text Size: 135KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 274KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ