Static task
static1
Behavioral task
behavioral1
Sample
b2ba79d98ac3fe75385d488d9fab4d42_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b2ba79d98ac3fe75385d488d9fab4d42_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2ba79d98ac3fe75385d488d9fab4d42_JaffaCakes118
-
Size
196KB
-
MD5
b2ba79d98ac3fe75385d488d9fab4d42
-
SHA1
94b3d3b015a80346fc586e68e89b938474f8cea4
-
SHA256
5b8b4746f00b3fecd85ffc0f153f993690393f34cecc4f1b53a24a4987774693
-
SHA512
02cad028aa30883e321d2c4c8d21bd7f538083af78e4fd84f7ac03fe8e5604066660a279e9b508110d135565d77c5eecdc336722864f115012420d08f59efb13
-
SSDEEP
3072:51GQGux4qFt/gXBJT8/3FujBvgAUUxG3tGdLxdRoLta6hSAtuL62:+QlKXBV8Mj9IUxGdGh4fg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2ba79d98ac3fe75385d488d9fab4d42_JaffaCakes118
Files
-
b2ba79d98ac3fe75385d488d9fab4d42_JaffaCakes118.exe windows:4 windows x86 arch:x86
b6145e3afeb470d81cbe9499bf78f804
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
GetFileTime
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
FreeLibrary
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
HeapFree
SetStdHandle
GetFileType
GetACP
RaiseException
HeapReAlloc
HeapSize
GlobalFlags
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStartupInfoA
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
Sleep
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FindNextFileA
FindFirstFileA
GetLastError
SetLastError
FindClose
InterlockedExchange
LocalFree
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
HeapCreate
HeapAlloc
HeapDestroy
GetCurrentDirectoryA
GetTempPathA
CopyFileA
GetShortPathNameA
GetFileAttributesA
lstrlenA
WritePrivateProfileStringA
MultiByteToWideChar
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
FindResourceA
SizeofResource
LoadResource
CreateDirectoryA
GetSystemDirectoryA
GetModuleFileNameA
GetCommandLineA
GetModuleHandleA
GetVersionExA
UnhandledExceptionFilter
WinExec
user32
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
ShowWindow
LoadCursorA
GetSysColorBrush
DestroyMenu
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetDlgItem
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetTopWindow
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
LoadStringA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
GetMenuItemCount
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowLongA
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
SetCursor
FindWindowA
PostQuitMessage
GetCapture
WinHelpA
DefWindowProcA
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
SendMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
UnhookWindowsHookEx
GetSystemMetrics
CharUpperA
wsprintfA
PostMessageA
GetClassInfoA
MessageBoxA
gdi32
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
DeleteObject
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
comctl32
ord17
ole32
CoUninitialize
CoInitialize
CoCreateInstance
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ