Static task
static1
Behavioral task
behavioral1
Sample
b62da2c08f9fa9c2b741e4a8e3616f19_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b62da2c08f9fa9c2b741e4a8e3616f19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b62da2c08f9fa9c2b741e4a8e3616f19_JaffaCakes118
-
Size
364KB
-
MD5
b62da2c08f9fa9c2b741e4a8e3616f19
-
SHA1
c1f3b2fb274a64463419b7bd88a20c0eac6fcaa4
-
SHA256
c5ff6ecea3379d3f3cdd3afbd5437941705b4ff5e10934d557524da2443ca93a
-
SHA512
19636da6ce23114c8a9d097d1a381a6809b27289d3e3c636890ae02cb2c7bcd6c0770872145cd9b8a136188668a771cef67b7567ba1006f6c99a7eda81d60490
-
SSDEEP
6144:mkZyNpDRFHhSWxcfNeuHCXoqOz3pcgI36FHnTvkjbn9TBol7IAOZgSKbfvRT2:m+yNtZHxOeuCOL9kjRTyl7IoSy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b62da2c08f9fa9c2b741e4a8e3616f19_JaffaCakes118
Files
-
b62da2c08f9fa9c2b741e4a8e3616f19_JaffaCakes118.exe windows:4 windows x86 arch:x86
539075c53e07edf45013fe8e1a970c43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SearchPathW
SystemTimeToFileTime
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LockResource
GetFileSize
CreateFileA
GetModuleFileNameA
TerminateProcess
Sleep
GetSystemDirectoryW
WideCharToMultiByte
DeleteFileW
SearchPathA
GetShortPathNameA
MultiByteToWideChar
GetLastError
CreateMutexW
CreateEventW
WaitForSingleObject
OpenEventW
ExitProcess
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
ReadFile
GetModuleHandleA
GetTickCount
AllocateUserPhysicalPages
CreateJobObjectW
CreateFileW
WriteFile
CloseHandle
GetShortPathNameW
GetModuleFileNameW
LoadLibraryExW
SizeofResource
GetProcAddress
SetEvent
GetModuleHandleW
LoadResource
WinExec
LoadLibraryA
FindResourceA
ExitThread
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
HeapAlloc
HeapFree
RtlUnwind
ResumeThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RaiseException
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetHandleCount
user32
GetWindowRect
GetDC
SetTimer
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
GetClientRect
CreateWindowExW
DrawTextW
GetWindowDC
CreateWindowExA
ReleaseDC
SetWindowLongW
UpdateWindow
DialogBoxParamW
ExitWindowsEx
GetDesktopWindow
ShowWindow
GetMessageW
TranslateMessage
DispatchMessageW
GetWindowLongA
SetDlgItemTextA
gdi32
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
wininet
InternetCrackUrlW
Sections
.text Size: 271KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ