Static task
static1
Behavioral task
behavioral1
Sample
b668c2598fac31ec0b8e684a63d31729_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b668c2598fac31ec0b8e684a63d31729_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b668c2598fac31ec0b8e684a63d31729_JaffaCakes118
-
Size
294KB
-
MD5
b668c2598fac31ec0b8e684a63d31729
-
SHA1
3009714f37eea54fe1ffcd01a093cde6fe27689d
-
SHA256
567d36e71ef43b1b0b835c976a2ecdb6de5c4b4fe370903e298aa6d8c0eed2c5
-
SHA512
6f0ce44cd6c584f6fcc6e963eb1dc0d12d8f8f685891ef692147189b31b7e577c1212bcd22a5b3adbfc32e43b6344f0fc6a365022ccbd914b34d7de8b22f7397
-
SSDEEP
6144:O/55qJl4tAb8RUP0syFBreYKBHVKriru0EU0L3o:85W3wO0zvK1KeBETL4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b668c2598fac31ec0b8e684a63d31729_JaffaCakes118
Files
-
b668c2598fac31ec0b8e684a63d31729_JaffaCakes118.exe windows:4 windows x86 arch:x86
fec6aea0818df8b577a847b21d13feba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
FindTextA
ChooseFontW
PrintDlgW
shell32
ShellHookProc
SheSetCurDrive
ExtractAssociatedIconExW
SHQueryRecycleBinW
SHAddToRecentDocs
gdi32
gdiPlaySpoolStream
SelectClipPath
GetWinMetaFileBits
GetEnhMetaFileDescriptionW
SetMagicColors
UpdateICMRegKeyA
SetDeviceGammaRamp
SetFontEnumeration
GetRegionData
CreateRectRgn
CreateCompatibleDC
OffsetRgn
GetCharABCWidthsFloatW
PaintRgn
GetLogColorSpaceW
GetBitmapDimensionEx
PtVisible
GetMetaFileBitsEx
GetTextFaceA
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetGlyphOutlineA
CreateHalftonePalette
SetWorldTransform
kernel32
CompareStringW
MoveFileExA
CompareStringA
TlsGetValue
GetACP
GetTickCount
IsValidCodePage
GetUserDefaultLCID
ExitProcess
SetLastError
HeapSize
GetCurrentThread
HeapDestroy
ReadConsoleOutputA
TerminateProcess
LCMapStringW
HeapCreate
EnumCalendarInfoA
TlsSetValue
EnterCriticalSection
GetCurrentDirectoryW
GetLocaleInfoA
GetCPInfo
GetCommandLineA
lstrcmpW
GetCurrentThreadId
IsValidLocale
OpenMutexW
GetCurrentProcess
SetEnvironmentVariableA
MultiByteToWideChar
GetCompressedFileSizeA
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
GetDateFormatA
GetDiskFreeSpaceW
GetLastError
GetModuleFileNameA
GetFileType
GetPrivateProfileSectionW
UnhandledExceptionFilter
QueryPerformanceCounter
HeapAlloc
ReadConsoleOutputCharacterW
GetTimeFormatA
GetProcAddress
RtlUnwind
VirtualAlloc
LocalReAlloc
GetLocaleInfoW
GetNamedPipeHandleStateW
FreeEnvironmentStringsW
GetStringTypeW
DebugBreak
WriteFile
GetModuleHandleA
GetConsoleCursorInfo
LeaveCriticalSection
TlsFree
GetStdHandle
GetTimeZoneInformation
IsBadWritePtr
EnumSystemLocalesA
GetOEMCP
VirtualFree
InitializeCriticalSection
FreeEnvironmentStringsA
GetVersionExA
HeapFree
VirtualQuery
DeleteCriticalSection
GetSystemInfo
HeapReAlloc
InterlockedExchange
GetStringTypeA
SetHandleCount
GetUserDefaultLangID
GetCurrentProcessId
LocalAlloc
TlsAlloc
GetFullPathNameA
EnumDateFormatsA
GetSystemTimeAsFileTime
CreateMailslotA
VirtualProtect
GetStartupInfoA
LoadLibraryA
EnumDateFormatsExW
WideCharToMultiByte
wininet
InternetSecurityProtocolToStringW
InternetOpenUrlA
InternetGetConnectedStateExW
InternetDial
InternetGetCookieA
InternetCreateUrlW
HttpSendRequestA
user32
UnloadKeyboardLayout
EnableMenuItem
SetWindowTextW
CloseClipboard
DialogBoxParamA
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ