Static task
static1
Behavioral task
behavioral1
Sample
ae99d1d6fd207cbde6ab7c7f083321f7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ae99d1d6fd207cbde6ab7c7f083321f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ae99d1d6fd207cbde6ab7c7f083321f7_JaffaCakes118
-
Size
315KB
-
MD5
ae99d1d6fd207cbde6ab7c7f083321f7
-
SHA1
ca9a378227777633310fa35e168ce685c19477fb
-
SHA256
52fc41e94e573a42d90709e9c5809afb082ce0d8ea4fc44c47fcfec0b45792af
-
SHA512
6bcb265daa9a3f1164ad7a3f04331b9955a36892fc6f83850a73142a667363d8b43078b201d4b7c126a6f70da41f2d0eff7eb6f47b6986d8e319a39dd2d69d2f
-
SSDEEP
6144:02apL8VKItMlHiG/FTEApFjjHLhfen72/3EZqbhx7wgBn9Vod5:02apAVJ+lCAFTvPjHhm7z85tVo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae99d1d6fd207cbde6ab7c7f083321f7_JaffaCakes118
Files
-
ae99d1d6fd207cbde6ab7c7f083321f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
e4a92456106e98877071ca47380ae27d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
wininet
SetUrlCacheEntryGroup
InternetConnectW
HttpEndRequestA
InternetQueryOptionW
HttpSendRequestExW
GopherOpenFileA
InternetTimeFromSystemTimeW
CommitUrlCacheEntryA
InternetShowSecurityInfoByURLW
kernel32
ReadFileEx
FlushFileBuffers
GetCurrentThreadId
SetFileAttributesA
LoadLibraryA
GetOEMCP
WaitForMultipleObjectsEx
GetACP
LeaveCriticalSection
WriteFile
InterlockedExchange
CompareStringW
OpenWaitableTimerW
TlsFree
GetCurrentProcess
FreeEnvironmentStringsA
TlsSetValue
SetEnvironmentVariableA
InitializeCriticalSection
HeapReAlloc
GetSystemTimeAsFileTime
VirtualAlloc
CompareStringA
DeleteCriticalSection
TlsAlloc
RtlUnwind
OpenMutexA
GetStringTypeW
GetCurrentProcessId
SetLastError
SetStdHandle
GetEnvironmentStringsW
GetCommandLineA
GetStdHandle
WritePrivateProfileStringA
TerminateProcess
GetSystemTimeAdjustment
AddAtomW
GetModuleHandleA
HeapSize
CloseHandle
GetLocaleInfoA
GetLastError
GetProcAddress
FreeEnvironmentStringsW
HeapCreate
GetLogicalDriveStringsW
IsBadWritePtr
SetConsoleScreenBufferSize
GetTimeZoneInformation
GetVersionExA
UnhandledExceptionFilter
CreateDirectoryW
HeapDestroy
IsValidCodePage
CopyFileExA
GetLocaleInfoW
EnterCriticalSection
VirtualProtect
GetCurrentThread
GetTimeFormatA
WriteConsoleA
GetCPInfo
GetTickCount
GetFileType
GetDateFormatA
HeapAlloc
GetModuleFileNameA
GetSystemInfo
ReadFile
GetStartupInfoA
VirtualQuery
LCMapStringW
QueryPerformanceCounter
GetEnvironmentStrings
IsValidLocale
CreateDirectoryA
TlsGetValue
EnumResourceTypesW
GetStringTypeA
WideCharToMultiByte
VirtualFree
LCMapStringA
SetHandleCount
ExitProcess
CreateMutexA
GetUserDefaultLCID
MultiByteToWideChar
GetThreadSelectorEntry
HeapFree
EnumSystemLocalesA
SetFilePointer
GetProfileSectionW
shell32
SHFormatDrive
advapi32
LookupPrivilegeValueA
CryptEncrypt
CryptDeriveKey
RegQueryMultipleValuesA
CryptHashSessionKey
LookupAccountSidW
CryptDestroyHash
CryptEnumProvidersW
LogonUserA
CryptAcquireContextA
gdi32
SetMapperFlags
GetRasterizerCaps
GetPath
SetViewportExtEx
SetWinMetaFileBits
GetDeviceCaps
CreateDCA
DeleteDC
GetDCOrgEx
PolyTextOutW
PtInRegion
GetNearestColor
UnrealizeObject
SetDIBits
SetMapMode
TextOutW
SetTextJustification
EqualRgn
user32
MessageBoxA
GetClassLongW
ShowWindow
DdeFreeStringHandle
DefMDIChildProcW
RegisterClassA
RegisterClassExA
SetShellWindow
AdjustWindowRect
CreateWindowExW
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ