Static task
static1
Behavioral task
behavioral1
Sample
b68f3c9566469b344b32f579f51d148d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b68f3c9566469b344b32f579f51d148d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b68f3c9566469b344b32f579f51d148d_JaffaCakes118
-
Size
246KB
-
MD5
b68f3c9566469b344b32f579f51d148d
-
SHA1
8a0b5def92f6846f15b3900b81d9a7e5bc947013
-
SHA256
4879143bae4d507e867a7110a2238d862875a2410e63846d78b635f9c9a44a2f
-
SHA512
ca9ff775f5528369a9aba0941324d13ebe4b57e96787d572320fe5bc318634c070746d8a29555b8a6f163038a5aea49c3d395d757ad48dda3e439f4eab0372a0
-
SSDEEP
6144:FKJxJ1BHV6tK3Rj2yJfnwRXHqbqYgguqDVb5LJEt5:FKDJ1RV6o3V2af4qlZJu5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b68f3c9566469b344b32f579f51d148d_JaffaCakes118
Files
-
b68f3c9566469b344b32f579f51d148d_JaffaCakes118.exe windows:4 windows x86 arch:x86
3e2cfdf254467db77094d2283413700f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetFileSize
CreateFileA
LCMapStringW
LCMapStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
CloseHandle
HeapReAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
CreateThread
Sleep
SetEnvironmentVariableA
GetLastError
VirtualAlloc
GetCurrentProcessId
VirtualProtect
GetModuleHandleA
LoadLibraryA
GetProcAddress
SetFilePointer
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
FlushFileBuffers
user32
SendMessageA
SetTimer
IsWindow
PeekMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
KillTimer
DefWindowProcA
LoadCursorA
RegisterClassA
GetSystemMetrics
CreateWindowExA
PostMessageA
MessageBoxA
SetWindowTextA
GetDlgItem
CreateDialogIndirectParamA
ShowWindow
UpdateWindow
DestroyWindow
gdi32
CreatePalette
CreateCompatibleDC
SelectObject
BitBlt
DeleteObject
CreateDCA
SelectPalette
RealizePalette
CreateDIBitmap
DeleteDC
Sections
.text Size: - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text1 Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.pdata Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ