Static task
static1
Behavioral task
behavioral1
Sample
b4f141a583567acf8b42986dd47dbb9c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b4f141a583567acf8b42986dd47dbb9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b4f141a583567acf8b42986dd47dbb9c_JaffaCakes118
-
Size
2.4MB
-
MD5
b4f141a583567acf8b42986dd47dbb9c
-
SHA1
7ebed97b81d9e5a9d1c9c6048ae06c90b0d898af
-
SHA256
47612115e8bb6749f6a543cc5482a8bdf9197dc298d4d93f0fe199c012065194
-
SHA512
8ac06660aca21852b8884cbc526344486740a9862a43723d5bfdef0c6cea3d25e8c1af6ea890e9b269b6bbc5d069d2620e1fa8ad346244ce5a1c99494f6f1d93
-
SSDEEP
49152:yh9rmqPL+ej3X5RnniGpDNwMfz9eZcjowBLeXR:+9rpL+ej3X5RnniGpDNwMfz9eZcjowBI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4f141a583567acf8b42986dd47dbb9c_JaffaCakes118
Files
-
b4f141a583567acf8b42986dd47dbb9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
92920329297b469283097070cf1c1754
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
QueryPerformanceFrequency
QueryPerformanceCounter
InterlockedExchange
lstrcatA
_lclose
_lread
_lwrite
OpenFile
lstrcmpiA
GetLocalTime
GetSystemInfo
GetCurrentThreadId
_hread
DeleteFileA
GetLastError
CreateEventA
ResetEvent
GetThreadPriority
GetCurrentThread
SetThreadPriority
RaiseException
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
SetEvent
GetOEMCP
GetACP
SetFilePointer
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetCPInfo
IsBadCodePtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetCurrentProcess
TerminateProcess
TlsGetValue
SetLastError
GetVersionExA
WaitForMultipleObjects
InterlockedDecrement
ReleaseSemaphore
GetProcAddress
WaitForSingleObject
Sleep
GetPrivateProfileIntA
WritePrivateProfileStringA
lstrlenA
EnterCriticalSection
LeaveCriticalSection
lstrcpyA
CloseHandle
FreeLibrary
TlsAlloc
IsBadWritePtr
HeapReAlloc
DeleteCriticalSection
InitializeCriticalSection
CreateSemaphoreA
GetModuleFileNameA
GetPrivateProfileStringA
LoadLibraryA
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
ExitProcess
GetVersion
IsProcessorFeaturePresent
HeapFree
HeapAlloc
RtlUnwind
IsBadReadPtr
CreateThread
TlsSetValue
ExitThread
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
user32
ReleaseDC
IsWindow
wsprintfA
GetDC
GetClientRect
DispatchMessageA
TranslateMessage
PeekMessageA
LoadBitmapA
GetWindowTextA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
BeginPaint
EndPaint
ShowWindow
DefWindowProcA
EndDialog
IsDlgButtonChecked
CheckRadioButton
GetDlgItem
EnableWindow
CheckDlgButton
GetWindowRect
GetSystemMetrics
SetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
SetWindowTextA
RedrawWindow
FindWindowExA
MessageBoxA
GetAsyncKeyState
DialogBoxParamA
LoadMenuA
DestroyWindow
gdi32
GetStretchBltMode
SetTextColor
SetBkMode
ExtTextOutA
GetStockObject
PatBlt
CreateCompatibleDC
SelectObject
SetStretchBltMode
StretchBlt
DeleteDC
DeleteObject
CreateDIBSection
BitBlt
comdlg32
GetSaveFileNameA
advapi32
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
winmm
timeGetTime
shlwapi
SHDeleteKeyA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 764KB - Virtual size: 762KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 4KB - Virtual size: 304B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 36KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dtext1 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE