Static task
static1
Behavioral task
behavioral1
Sample
a8d32c5b4bfa0ac07764cf921d01e2b3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
a8d32c5b4bfa0ac07764cf921d01e2b3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a8d32c5b4bfa0ac07764cf921d01e2b3_JaffaCakes118
-
Size
332KB
-
MD5
a8d32c5b4bfa0ac07764cf921d01e2b3
-
SHA1
aa18add50c2d13445a94904a750d3e12e3fc08bb
-
SHA256
f31d0f0a84edcc17397e38a42ed73f001a51d44485ffe1a2c68bee75d49ec950
-
SHA512
924e16d83d9fa84c478dd8bd6f76cd85af22d3e77e022a0abcd9a33001af4ae6cf11df0ca6c356223ef553bb17674f7fc70ec2f1dc20f1a6eb991dd4e2f5fede
-
SSDEEP
6144:Mj3539LYuFQkWJT3cqHDN3S2CiCwdqni5x4YvVxdGM2ELR1q2T:M9NLYWrW3cgN3SNiCwdqutn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8d32c5b4bfa0ac07764cf921d01e2b3_JaffaCakes118
Files
-
a8d32c5b4bfa0ac07764cf921d01e2b3_JaffaCakes118.exe windows:4 windows x86 arch:x86
a0011d316afb30c8980287eda000e7c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
ole32
GetHGlobalFromStream
ReleaseStgMedium
StringFromGUID2
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc
CoSetProxyBlanket
CoCreateInstanceEx
shell32
ShellExecuteW
ShellExecuteExW
kernel32
lstrlenW
lstrcpyW
lstrcmpiW
WriteFile
WideCharToMultiByte
CloseHandle
CreateFileW
DeleteCriticalSection
DisableThreadLibraryCalls
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageW
GetComputerNameW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
user32
wsprintfW
WinHelpW
DialogBoxParamW
EnableWindow
EndDialog
GetDC
GetDlgItem
GetDlgItemTextA
GetParent
GetWindowLongW
InsertMenuItemW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
PostMessageW
RegisterClipboardFormatW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
SystemParametersInfoW
comctl32
PropertySheetW
CreatePropertySheetPageW
crypt32
CertGetEnhancedKeyUsage
CryptQueryObject
CryptFindOIDInfo
CryptEnumOIDInfo
CryptEncodeObject
CryptDecodeObject
CertAddCertificateContextToStore
CertCloseStore
CertControlStore
CertDeleteCertificateFromStore
CertDuplicateCertificateContext
CertDuplicateStore
CertEnumCertificatesInStore
CertEnumSystemStore
CertFindCRLInStore
CertFreeCRLContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertSaveStore
CertGetNameStringW
CertOpenStore
gdi32
CreateFontIndirectW
DeleteObject
GetDeviceCaps
rpcrt4
UuidCreate
UuidToStringW
RpcStringFreeW
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ