Static task
static1
Behavioral task
behavioral1
Sample
adc4f82d1f4eedeb1ca33cd8edf776b0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
adc4f82d1f4eedeb1ca33cd8edf776b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
adc4f82d1f4eedeb1ca33cd8edf776b0_JaffaCakes118
-
Size
229KB
-
MD5
adc4f82d1f4eedeb1ca33cd8edf776b0
-
SHA1
300688afc05a623b657ef2abb6a8396e2ab6295d
-
SHA256
2d38097bc525f1c19e603c7ced9eeccf91fb226df7018acfe3245ec1c14b929b
-
SHA512
926f9736cba3ed407a9920588d84b9f2fe38ef88d835875d7ef413a7383116fa38eab7f5a9ef57540e343e63746284406e40fa461543843edad879d81ce53f74
-
SSDEEP
3072:Fv7QYmS64ZNV/mq59hdXQ1x6w0FVuul7c8LB5Fxw4D+HFpyzzYyQif/eUyi0xBCS:F8N4Dx9rgz6w0FVudTFHDEYyQVHCJGf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adc4f82d1f4eedeb1ca33cd8edf776b0_JaffaCakes118
Files
-
adc4f82d1f4eedeb1ca33cd8edf776b0_JaffaCakes118.exe windows:5 windows x86 arch:x86
b256a060d6d87afceb96a5224c946448
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreateSequential
kernel32
DeleteFileA
MoveFileA
GetCompressedFileSizeA
lstrlenA
LocalFree
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
Sleep
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedDecrement
CompareStringA
GetModuleHandleW
InterlockedIncrement
GetFileAttributesA
GetFileSizeEx
GetFileTime
GlobalGetAtomNameA
lstrcmpA
GetCurrentThreadId
GlobalAddAtomA
GlobalFlags
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetTimeZoneInformation
GetLocalTime
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
VirtualAlloc
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualFree
HeapCreate
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
CompareStringW
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcessHeap
GetComputerNameA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
WaitForSingleObject
CreateEventA
SetLastError
FindResourceA
SizeofResource
LockResource
LoadResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
user32
GetDlgItem
IsWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
LoadIconA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
DestroyMenu
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CallWindowProcA
GetTopWindow
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetKeyState
PeekMessageA
ValidateRect
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetWindowThreadProcessId
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
CharUpperA
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetKeyboardLayoutNameA
SendMessageA
LoadStringA
GetClassNameA
GetForegroundWindow
GetWindowTextA
EnumChildWindows
CallNextHookEx
PostQuitMessage
DefWindowProcA
RegisterClassExA
SetWindowsHookExA
CreateWindowExA
SetTimer
GetMessageA
DispatchMessageA
UnhookWindowsHookEx
SetForegroundWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetMenu
SetMenu
GetClientRect
CopyRect
PostMessageA
SetWindowTextA
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
shell32
SHGetSpecialFolderPathA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ole32
CoUninitialize
CoCreateInstance
CoInitialize
shlwapi
PathFindFileNameA
PathIsUNCA
PathStripToRootA
PathRemoveFileSpecA
oleacc
LresultFromObject
CreateStdAccessibleObject
wininet
InternetQueryDataAvailable
HttpOpenRequestA
InternetConnectA
HttpSendRequestExA
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
HttpAddRequestHeadersA
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
gdi32
GetStockObject
SetViewportExtEx
DeleteObject
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
CreateBitmap
DeleteDC
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
GetDeviceCaps
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
comdlg32
GetFileTitleA
oleaut32
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 568B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ