Static task
static1
Behavioral task
behavioral1
Sample
ae54f80da6d38ed861d5a8a1d7e8e245_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae54f80da6d38ed861d5a8a1d7e8e245_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae54f80da6d38ed861d5a8a1d7e8e245_JaffaCakes118
-
Size
578KB
-
MD5
ae54f80da6d38ed861d5a8a1d7e8e245
-
SHA1
2860292700af860402f000e4da09b28d6a66ed36
-
SHA256
c885f472b35cc7b7cecf11f5fb16601118c30bd793924e3b2509da9f6e697bf4
-
SHA512
b7b21c3dc085d901846ebebf9d35b298bc56d42027d79fa278c7f1a5792acb94a7f3858e63670fa896bf14fbff8f155920d041b27260bf614d39d4e1caac38a6
-
SSDEEP
12288:PrY17NfVAk2hHLsu+Oac8WNGzebKR6VOzzrL:j0BVAka7IVWNGOAX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae54f80da6d38ed861d5a8a1d7e8e245_JaffaCakes118
Files
-
ae54f80da6d38ed861d5a8a1d7e8e245_JaffaCakes118.exe windows:4 windows x86 arch:x86
66d2ddbc3da22189e0265b2dad4a3bf3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
AttachThreadInput
DialogBoxIndirectParamA
EnableScrollBar
GetMessageW
GetDlgCtrlID
HideCaret
UnregisterHotKey
GetDC
RegisterClassExA
SetMenuItemInfoW
MoveWindow
GetMenuContextHelpId
CreateIconIndirect
DlgDirListA
SwitchToThisWindow
ToAsciiEx
GetActiveWindow
RegisterClassA
DdePostAdvise
DdeKeepStringHandle
DefWindowProcA
kernel32
WaitForMultipleObjects
InitializeCriticalSection
IsValidLocale
EnumSystemLocalesA
SetConsoleCtrlHandler
SetEnvironmentVariableA
LocalFileTimeToFileTime
lstrcmpiA
GetEnvironmentStringsW
WriteConsoleW
GetProcessHeap
WriteConsoleA
HeapAlloc
VirtualAlloc
GetLocaleInfoA
TlsFree
GetLastError
FreeEnvironmentStringsW
GetCurrentProcess
FlushFileBuffers
HeapReAlloc
CreateFileA
OpenMutexA
HeapSize
GetSystemTimeAsFileTime
GetTimeFormatA
TlsSetValue
GetStringTypeW
GetFileType
FreeLibrary
SetStdHandle
WriteProfileSectionA
LCMapStringA
GetConsoleCP
CreateMutexA
GetModuleFileNameA
GetCurrentThread
DebugActiveProcess
TlsGetValue
CompareStringW
GetPriorityClass
SetFileAttributesA
GlobalGetAtomNameW
GetVersionExA
SetConsoleWindowInfo
GetTimeZoneInformation
IsDebuggerPresent
GetModuleHandleA
GetACP
GetStringTypeA
GetTickCount
DeleteCriticalSection
InterlockedIncrement
ReadFile
QueryPerformanceCounter
WideCharToMultiByte
HeapCreate
LoadLibraryA
GetStartupInfoA
SetLastError
VirtualFree
GetCurrentProcessId
EnterCriticalSection
RtlUnwind
HeapFree
InterlockedExchange
WriteFile
GetEnvironmentStrings
CloseHandle
GetOEMCP
GetCommandLineA
GetLocaleInfoW
IsValidCodePage
ExitProcess
InterlockedDecrement
HeapDestroy
SetThreadLocale
TlsAlloc
LCMapStringW
MultiByteToWideChar
GetStdHandle
GetUserDefaultLCID
GlobalUnlock
GetConsoleMode
CompareStringA
GetCurrentThreadId
GetCPInfo
TerminateProcess
GetConsoleOutputCP
SetHandleCount
UnhandledExceptionFilter
GetDateFormatA
SetFilePointer
FreeEnvironmentStringsA
Sleep
LeaveCriticalSection
VirtualQuery
GetProcAddress
SetUnhandledExceptionFilter
EnumSystemCodePagesW
SetCriticalSectionSpinCount
Sections
.text Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ