Static task
static1
Behavioral task
behavioral1
Sample
a9657c2112cf9b8cd884ef055e1a1024_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a9657c2112cf9b8cd884ef055e1a1024_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a9657c2112cf9b8cd884ef055e1a1024_JaffaCakes118
-
Size
402KB
-
MD5
a9657c2112cf9b8cd884ef055e1a1024
-
SHA1
b8256d1ee7b30667601ef5507e82369a3944eec2
-
SHA256
7873f9a45aab724a7ddb9df3c1d4771786023bc05dd7964a1eb00051a2e6d94a
-
SHA512
33eaf3516f3c0a8b3e6b0b87b65335768c5b206948499be66f497f861294af78ad442357cca9bf4087d4e145725344a2f8821d2328c70abcb5bd822c4a55c0af
-
SSDEEP
12288:g8XP5+NOF8CXERNJu/kMXodeItiG7eE8Cy:gsPwEF8IERjNRd5EGSm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9657c2112cf9b8cd884ef055e1a1024_JaffaCakes118
Files
-
a9657c2112cf9b8cd884ef055e1a1024_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec04166f7cc9549a41b4b387b8169202
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetAsyncKeyState
SetClassLongW
GetCursorPos
MessageBoxW
UnhookWindowsHookEx
SetDlgItemTextA
InsertMenuW
GetMessagePos
RegisterClassA
RegisterClassExA
DefMDIChildProcA
GetCapture
CreateAcceleratorTableW
OpenWindowStationW
DrawIcon
comctl32
InitCommonControlsEx
wininet
SetUrlCacheConfigInfoA
FtpCreateDirectoryA
GetUrlCacheEntryInfoExW
GopherFindFirstFileW
GopherCreateLocatorW
FindNextUrlCacheEntryA
UrlZonesDetach
GetUrlCacheEntryInfoW
FtpGetCurrentDirectoryA
gdi32
UnrealizeObject
PatBlt
ColorCorrectPalette
CreateColorSpaceA
EndPath
EnumObjects
CreatePen
SetROP2
CreateEnhMetaFileA
GetCharABCWidthsFloatA
FillRgn
GetFontData
CreateColorSpaceW
UpdateICMRegKeyW
GetTextExtentPoint32A
OffsetClipRgn
CreatePenIndirect
GetEnhMetaFilePaletteEntries
CreatePatternBrush
GetRgnBox
ExcludeClipRect
CloseMetaFile
kernel32
GetTimeFormatA
GetLogicalDriveStringsW
IsValidCodePage
GetCPInfo
TerminateProcess
GetOEMCP
WriteConsoleInputA
GetModuleHandleW
SetHandleCount
GetProcessAffinityMask
SetLastError
CloseHandle
GetUserDefaultLCID
IsDebuggerPresent
GetEnvironmentStringsW
CreateMutexA
VirtualAlloc
FreeLibrary
GetTimeZoneInformation
ExitProcess
GetCurrentProcessId
FlushFileBuffers
FreeEnvironmentStringsW
LCMapStringA
GetLocaleInfoA
UnlockFile
GetCurrentThreadId
LoadLibraryA
WideCharToMultiByte
InterlockedIncrement
GetStartupInfoA
GetCommandLineW
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
GetDateFormatA
Sleep
VirtualFree
HeapReAlloc
TlsFree
GetLastError
IsValidLocale
GetCurrentThread
GetProcAddress
SetStdHandle
SetUnhandledExceptionFilter
EnterCriticalSection
RemoveDirectoryA
HeapAlloc
WriteConsoleW
GetConsoleOutputCP
TlsAlloc
InitializeCriticalSectionAndSpinCount
OpenMutexA
InterlockedExchange
EnumSystemLocalesA
MultiByteToWideChar
GetFileType
HeapDestroy
GetACP
GetModuleFileNameW
UnhandledExceptionFilter
LCMapStringW
TlsSetValue
GetStringTypeW
QueryPerformanceCounter
GetConsoleCP
HeapCreate
SetEnvironmentVariableA
CreateFileA
SetFilePointer
CompareStringW
WaitCommEvent
EnumResourceLanguagesA
SetConsoleCtrlHandler
TlsGetValue
DeleteCriticalSection
GetCommandLineA
GetNumberFormatW
GetLocaleInfoW
GetStringTypeA
GetConsoleMode
GetCurrentProcess
WriteConsoleA
HeapFree
GetStartupInfoW
ReadFile
HeapSize
WriteFile
LeaveCriticalSection
RtlUnwind
InterlockedDecrement
CompareStringA
GetSystemTimeAsFileTime
VirtualQuery
GetTickCount
RtlMoveMemory
Sections
.text Size: 237KB - Virtual size: 237KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ