Static task
static1
Behavioral task
behavioral1
Sample
b0d827c1c2667f29f5e681e79e1af957_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b0d827c1c2667f29f5e681e79e1af957_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b0d827c1c2667f29f5e681e79e1af957_JaffaCakes118
-
Size
1.6MB
-
MD5
b0d827c1c2667f29f5e681e79e1af957
-
SHA1
2cf305ed64726b1e82441d838aac5b86ee5610f4
-
SHA256
3f4be00553a7b4f1fdd25970ffbc0bea6297cd3a0a701831f73ccad18f310ba0
-
SHA512
754bab6052af877f002a00157e8a9f0964d6604346b9279821dfdb08eba935c1dcae07280fbde8876a7f8c21af54719d7fd0fe312378d38f390eac0a7586a88b
-
SSDEEP
49152:AxXlN9dk9qgDidqSwJnTkWwIz30sa/kbc1FrcT:AxXlR6Mdq/TYIz30z9u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0d827c1c2667f29f5e681e79e1af957_JaffaCakes118
Files
-
b0d827c1c2667f29f5e681e79e1af957_JaffaCakes118.exe windows:4 windows x86 arch:x86
c269035ae4c4052a3bebdc8134d35297
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
kernel32
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageW
GetComputerNameW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
OutputDebugStringA
DisableThreadLibraryCalls
QueryPerformanceCounter
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrcpyW
lstrlenW
CloseHandle
CreateFileW
DeleteCriticalSection
OutputDebugStringW
user32
GetDlgItem
GetDlgItemTextA
GetParent
GetWindowLongW
InsertMenuItemW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
PostMessageW
RegisterClipboardFormatW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
SystemParametersInfoW
WinHelpW
wsprintfW
EndDialog
EnableWindow
DialogBoxParamW
GetDC
crypt32
CertDuplicateCertificateContext
CertDuplicateStore
CertEnumCertificatesInStore
CertEnumSystemStore
CertFindCRLInStore
CertFreeCRLContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertGetEnhancedKeyUsage
CertGetNameStringW
CertOpenStore
CertSaveStore
CryptDecodeObject
CryptEncodeObject
CryptEnumOIDInfo
CryptFindOIDInfo
CryptQueryObject
CertDeleteCertificateFromStore
CertControlStore
CertCloseStore
CertAddCertificateContextToStore
gdi32
DeleteObject
GetDeviceCaps
CreateFontIndirectW
rpcrt4
UuidCreate
UuidToStringW
RpcStringFreeW
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ