Static task
static1
Behavioral task
behavioral1
Sample
b2c3d1ef234cc545f86ef696b53a4fc7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b2c3d1ef234cc545f86ef696b53a4fc7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b2c3d1ef234cc545f86ef696b53a4fc7_JaffaCakes118
-
Size
699KB
-
MD5
b2c3d1ef234cc545f86ef696b53a4fc7
-
SHA1
22dafe648b9852cc49354ab700ea98d83353ee91
-
SHA256
610f836ba349212c6db5e79cd688eb1f2bb697ce1e25250ef9a3fc8ef48e163b
-
SHA512
8703929f8a7f3c9d1dc43f32801fe9faff946fc6bbbf8d58893c800056b9ea48dd1b681c7289d1bcce8acc7269602597b0b4643665f2ca7395b19ec6fa7a0e5c
-
SSDEEP
12288:MlhldZ0dBD+gWtiLyBRgJeI/aiGjRGkI0abpeSP+Al7XgI233SGIBIsM:e7aV3uByJx/aiGskjMZBljgI2HS+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2c3d1ef234cc545f86ef696b53a4fc7_JaffaCakes118
Files
-
b2c3d1ef234cc545f86ef696b53a4fc7_JaffaCakes118.exe windows:4 windows x86 arch:x86
801bc574bc5547ccdd230b735f2039f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetLastError
ExitProcess
VirtualAlloc
ResetEvent
Sleep
VirtualFree
HeapCreate
CloseHandle
ReadFile
SetFilePointer
TlsFree
RaiseException
HeapSize
WideCharToMultiByte
GetCommandLineW
LockResource
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GlobalAlloc
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
GlobalFree
lstrlenA
GetSystemInfo
UnmapViewOfFile
SetStdHandle
InterlockedIncrement
HeapAlloc
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
GlobalLock
DuplicateHandle
FindNextFileA
CompareStringA
FindFirstFileA
CompareStringW
GetProcessHeap
GetProcAddress
DeleteFileA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
QueryPerformanceCounter
GetOEMCP
GetCurrentProcessId
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetEndOfFile
VirtualQuery
TerminateProcess
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
MultiByteToWideChar
InterlockedDecrement
UnhandledExceptionFilter
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
IsDebuggerPresent
GetModuleFileNameW
InitializeCriticalSection
FormatMessageA
TlsGetValue
FindClose
LoadResource
GetEnvironmentVariableA
LocalFree
FreeLibrary
SetFileAttributesA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WaitForSingleObject
WriteFile
InterlockedExchange
GetStringTypeA
LoadLibraryW
GetCPInfo
FreeEnvironmentStringsW
SetErrorMode
CreateFileA
lstrcatA
LocalAlloc
GetLocaleInfoA
GetConsoleMode
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
SetEvent
FileTimeToSystemTime
GetStdHandle
GetCurrentThreadId
GetModuleHandleA
GetTickCount
lstrcmpiA
GetCurrentThread
user32
EnableMenuItem
GetSysColor
MessageBoxA
SetDlgItemTextA
SetForegroundWindow
LoadCursorA
ScreenToClient
GetDlgItem
CreateWindowExA
GetSubMenu
SetWindowTextA
EndDialog
SetWindowLongA
PostMessageA
GetWindowRect
GetSystemMetrics
DefWindowProcA
BeginPaint
SetFocus
EndPaint
DispatchMessageA
FillRect
SetTimer
GetWindowLongA
IsIconic
LoadStringA
IsWindowEnabled
EnableWindow
ShowWindow
GetParent
GetMessageA
DestroyWindow
UnregisterClassA
ReleaseDC
GetDC
IsWindow
PostQuitMessage
SetCursor
GetClientRect
DrawTextA
InvalidateRect
SendMessageA
IsWindowVisible
ole32
CoInitialize
CoUninitialize
advapi32
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
Sections
.text Size: 667KB - Virtual size: 990KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ