Static task
static1
Behavioral task
behavioral1
Sample
b3c1af0ee8e698a2364e8ac5dd03b7ce_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b3c1af0ee8e698a2364e8ac5dd03b7ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b3c1af0ee8e698a2364e8ac5dd03b7ce_JaffaCakes118
-
Size
512KB
-
MD5
b3c1af0ee8e698a2364e8ac5dd03b7ce
-
SHA1
b5de126bae983db32f9ce9487a4dc56e2f458474
-
SHA256
73b51c9b572d8f9bb55b208203bdc89e1efda53713fbf43b941cdb371397a7a9
-
SHA512
14689ff852851c300933eea12d25c98fd55f040f83c5e1a5133d79f75c6f6c40978e04961abf15dc4a920efb197b2a8d7c73e6721f7d47d3f403780b2e1e2fd0
-
SSDEEP
1536:8XFiX2aym5JSHt78r55iSIFAne7j44V4dvyc:EFcvmH6KFAe7jXV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3c1af0ee8e698a2364e8ac5dd03b7ce_JaffaCakes118
Files
-
b3c1af0ee8e698a2364e8ac5dd03b7ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
d4b1d8fab75582027fe967193573fbac
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomW
BuildCommDCBW
CloseHandle
CloseProfileUserMapping
CreateDirectoryA
CreateEventW
CreateFileMappingW
CreatePipe
CreateSemaphoreA
EnumSystemCodePagesW
ExitProcess
ExpandEnvironmentStringsA
FatalExit
FlushInstructionCache
FlushViewOfFile
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetAtomNameW
GetBinaryTypeA
GetCommProperties
GetCommandLineW
GetComputerNameW
GetConsoleFontSize
GetConsoleTitleA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceExA
GetFileAttributesExW
GetLastError
GetLocalTime
GetLocaleInfoW
GetModuleHandleW
GetPrivateProfileSectionNamesW
GetPrivateProfileStructA
GetProcessHeaps
GetProfileIntA
GetStartupInfoW
GetSystemDefaultLCID
GetSystemTime
GetThreadPriority
GetThreadTimes
GetTimeFormatW
GetVersion
GetVersionExW
GetWindowsDirectoryW
GlobalFix
Heap32Next
HeapCreate
HeapFree
HeapValidate
InterlockedCompareExchange
IsDBCSLeadByteEx
LoadModule
LocalSize
LocalUnlock
MoveFileExA
OpenFile
OpenWaitableTimerW
Process32First
QueryPerformanceFrequency
ReadConsoleOutputA
ReadConsoleOutputCharacterA
ReadFileEx
ReleaseSemaphore
RtlZeroMemory
ScrollConsoleScreenBufferW
SetCommConfig
SetCommMask
SetConsoleCtrlHandler
SetConsoleCursor
SetConsoleFont
SetConsoleMenuClose
SetConsoleTitleW
SetErrorMode
SetHandleCount
SetHandleInformation
SetLastError
SetProcessPriorityBoost
SetThreadIdealProcessor
VerifyConsoleIoHandle
VirtualProtect
VirtualQueryEx
WriteConsoleA
WriteConsoleInputVDMA
WriteFileGather
WritePrivateProfileStringA
WritePrivateProfileStructA
_llseek
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrlenW
user32
AnimateWindow
AnyPopup
ChangeClipboardChain
CharLowerBuffW
CharPrevW
CharUpperA
CharUpperW
CreateCaret
CreateDesktopA
DdeAbandonTransaction
DdeGetLastError
DialogBoxIndirectParamW
DlgDirListW
DlgDirListComboBoxA
DlgDirListComboBoxW
DragDetect
DragObject
DrawEdge
DrawMenuBar
EnumDisplaySettingsExA
EnumThreadWindows
EqualRect
FillRect
FlashWindow
GetClassInfoA
GetClassInfoW
GetClipCursor
GetCursor
GetCursorInfo
GetFocus
GetForegroundWindow
GetIconInfo
GetLastInputInfo
GetMenu
GetMenuCheckMarkDimensions
GetMenuItemInfoW
GetMessagePos
GetMessageTime
GetMonitorInfoA
GetParent
GetPropA
GetQueueStatus
GetScrollRange
GetShellWindow
GetTitleBarInfo
GetWindow
GetWindowDC
GetWindowModuleFileNameW
GetWindowTextA
GetWindowTextLengthW
GrayStringW
IMPGetIMEA
InSendMessageEx
InvalidateRgn
IsCharLowerW
IsChild
LoadMenuA
LoadMenuIndirectA
MessageBoxExW
ModifyMenuA
MsgWaitForMultipleObjects
OemKeyScan
OemToCharBuffW
PaintDesktop
PeekMessageW
RegisterClassExA
RegisterDeviceNotificationA
SendDlgItemMessageW
SendIMEMessageExA
SendIMEMessageExW
SetClassLongW
SetDebugErrorLevel
SetFocus
SetParent
SetPropW
SetUserObjectInformationA
gdi32
AbortDoc
AngleArc
Chord
CombineRgn
CreateBitmap
CreateEllipticRgnIndirect
CreateICA
CreatePalette
CreatePolygonRgn
DeleteObject
DeviceCapabilitiesExW
DrawEscape
EnumFontsW
EnumICMProfilesA
ExcludeClipRect
GdiComment
GdiGetBatchLimit
GdiGetDC
GdiPlayJournal
GetBkColor
GetBkMode
GetBoundsRect
GetCharABCWidthsFloatA
GetClipBox
GetClipRgn
GetColorSpace
GetCurrentObject
GetEnhMetaFileA
GetEnhMetaFileDescriptionA
GetEnhMetaFilePaletteEntries
GetMiterLimit
GetPixel
GetPixelFormat
GetTextFaceA
GetWindowOrgEx
OffsetViewportOrgEx
PathToRegion
PlayEnhMetaFile
PlayEnhMetaFileRecord
PolyPolyline
RemoveFontResourceW
ResetDCA
ResetDCW
ScaleViewportExtEx
ScaleWindowExtEx
SetColorSpace
SetPixelV
SetROP2
SetRectRgn
SetSystemPaletteUse
SetWinMetaFileBits
SetWindowExtEx
StartDocW
StrokeAndFillPath
UpdateColors
UpdateICMRegKeyW
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 51KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fbwz Size: 4KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ