Static task
static1
Behavioral task
behavioral1
Sample
b23e501b02bda8deeefc83d95119f1a1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b23e501b02bda8deeefc83d95119f1a1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b23e501b02bda8deeefc83d95119f1a1_JaffaCakes118
-
Size
202KB
-
MD5
b23e501b02bda8deeefc83d95119f1a1
-
SHA1
973ded40dfb472acc95d4ce2e580c51c052c578e
-
SHA256
51ff367682c3499f3663a3708d90de83a4d3e7337790c6af4b961b9647a76f48
-
SHA512
04ff3a5e29cc0635b56d27ae6e854a14ff40ffc0aeed4fe3355cf728b3a00ab8bc7556dadb87c006d255e1f273bfea04c727232f3bb41dff8608f51c69d92396
-
SSDEEP
6144:vBdMOv5SuYP/CcNmRmCG9aSebFjhQmarNPemxY:vJ5+dNSmTaplQxBxY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b23e501b02bda8deeefc83d95119f1a1_JaffaCakes118
Files
-
b23e501b02bda8deeefc83d95119f1a1_JaffaCakes118.exe windows:4 windows x86 arch:x86
6ebead13f52b934afadd6ada0a580006
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
CreateEventA
GetFullPathNameA
GetFileSize
ConnectNamedPipe
ExpandEnvironmentStringsW
GetStartupInfoW
lstrcpynA
GetLocalTime
GetFileAttributesA
AddAtomA
GetEnvironmentStringsW
GetCurrentProcessId
FileTimeToSystemTime
lstrcpyn
GetFileTime
ReplaceFileW
GetCurrentThreadId
SetComputerNameW
lstrcmpi
ExitProcess
SuspendThread
CreateDirectoryW
CreateMutexW
ReadDirectoryChangesW
CreateFileA
GetLogicalDriveStringsW
lstrcmpiW
FindAtomW
Sleep
CreateThread
EndUpdateResourceW
CopyFileExW
EndUpdateResourceA
QueryPerformanceFrequency
GetOEMCP
GetModuleHandleA
GetTempPathW
lstrcmpW
GetProcAddress
lstrlenW
LoadResource
user32
BringWindowToTop
ActivateKeyboardLayout
ShowWindow
RegisterWindowMessageW
CharLowerA
TrackPopupMenu
SetWindowRgn
GetDC
CreateIcon
UnregisterClassW
MessageBeep
LoadImageW
RegisterWindowMessageA
FrameRect
LoadIconW
InsertMenuA
DefWindowProcW
GetDC
gdi32
GetTextExtentPointW
OffsetWindowOrgEx
GetDeviceCaps
GetViewportOrgEx
EnumFontsW
GetLogColorSpaceA
GetSystemPaletteEntries
RealizePalette
GetClipBox
SetDCBrushColor
FloodFill
CloseMetaFile
Escape
AngleArc
SetColorSpace
PlayEnhMetaFile
advapi32
RegSaveKeyA
RegCreateKeyW
RegQueryInfoKeyW
shell32
ExtractIconA
SHGetSpecialFolderLocation
StrRChrW
ExtractIconExA
StrRStrW
StrRChrIA
DuplicateIcon
StrNCmpIA
setupapi
CM_Get_Class_Name_ExA
InstallHinfSectionA
CM_Disable_DevNode
SetupDiSetClassInstallParamsA
SetupAddSectionToDiskSpaceListA
ws2_32
getprotobynumber
recv
winmm
midiInReset
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.KsT Size: 1024B - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JsaqF Size: 512B - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.CflZ Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.XGYQ Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.igrtL Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RhnrqI Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kYI Size: 1024B - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ