Static task
static1
Behavioral task
behavioral1
Sample
b72962536c6af3afcf02d6cd27f87df1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b72962536c6af3afcf02d6cd27f87df1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b72962536c6af3afcf02d6cd27f87df1_JaffaCakes118
-
Size
525KB
-
MD5
b72962536c6af3afcf02d6cd27f87df1
-
SHA1
23fa126bf025886772741b9b3c708715374acc90
-
SHA256
d27f16b96099e4e553aaf2a8f1bebb0f1915c6219ead639e85508ddc94473b17
-
SHA512
02326adf6f9b59c3560b158104708f556594c7408b4f0886b03c215a6c1dbf1a10345dbfbb445715828b8bacca05b4518ebb403aefb34b30270ba5dbb41950fa
-
SSDEEP
12288:EiNMq20R+ozSIj4Mz+w2Sk+gNe+WsLB495o6CMUC:HMq2084SIP+P+gNe+Wsq959
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b72962536c6af3afcf02d6cd27f87df1_JaffaCakes118
Files
-
b72962536c6af3afcf02d6cd27f87df1_JaffaCakes118.exe windows:4 windows x86 arch:x86
7803d5f45817171adac0c665a09cbaa1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
InternalGetWindowText
GetCursorPos
DestroyIcon
EnumPropsExA
LoadIconA
FlashWindowEx
SetMenuContextHelpId
PaintDesktop
ChangeClipboardChain
GetDlgItem
SetWindowLongA
RegisterClipboardFormatA
IsCharAlphaW
CharLowerW
SetMenuItemInfoA
RegisterClassA
RegisterClassExA
CreateWindowExW
SetProcessWindowStation
wininet
UrlZonesDetach
FtpCommandW
RunOnceUrlCache
IsUrlCacheEntryExpiredA
DeleteIE3Cache
HttpAddRequestHeadersA
InternetReadFile
SetUrlCacheEntryGroupW
comctl32
InitCommonControlsEx
gdi32
GetObjectType
SetTextCharacterExtra
GetBitmapDimensionEx
AddFontResourceA
SetViewportExtEx
CancelDC
PaintRgn
Polygon
CreateRoundRectRgn
GetPath
SetWinMetaFileBits
CreateHatchBrush
GetMetaRgn
GetMapMode
CheckColorsInGamut
CopyEnhMetaFileW
advapi32
CryptGenKey
LookupPrivilegeNameA
CreateServiceW
RegSetValueExA
RegOpenKeyExW
RegRestoreKeyW
CryptDestroyKey
CryptDeriveKey
RegSetValueA
CryptSetProviderA
CryptEnumProvidersW
CryptSignHashA
CryptReleaseContext
CryptImportKey
AbortSystemShutdownA
LookupSecurityDescriptorPartsA
RegCloseKey
kernel32
UnhandledExceptionFilter
GetModuleHandleW
WriteConsoleA
OpenMutexA
CreatePipe
GetProcessShutdownParameters
MultiByteToWideChar
GetStdHandle
GetOEMCP
FlushFileBuffers
GetStartupInfoA
GetTempFileNameA
TlsAlloc
InterlockedExchange
WideCharToMultiByte
WriteFile
SetConsoleTitleA
RtlUnwind
SetFilePointer
VirtualFree
GetCommandLineW
GetCurrentThread
InterlockedDecrement
GetConsoleOutputCP
CreateFileA
GetConsoleMode
LeaveCriticalSection
GetCurrentProcess
GetUserDefaultLCID
FreeEnvironmentStringsW
SetLastError
EnterCriticalSection
CloseHandle
GetEnvironmentStringsW
GetStringTypeW
GetProfileIntW
HeapCreate
GetProcAddress
OutputDebugStringA
EnumSystemCodePagesA
GetTimeFormatA
GetCurrentProcessId
CreateEventA
HeapFree
TerminateProcess
VirtualAlloc
CompareStringA
RtlMoveMemory
IsValidLocale
GetCurrentThreadId
GetACP
IsValidCodePage
GetModuleFileNameA
SetEnvironmentVariableA
InterlockedIncrement
GetSystemDefaultLangID
InitializeCriticalSectionAndSpinCount
GetCommandLineA
GetStringTypeA
SetConsoleCtrlHandler
TlsGetValue
SetUnhandledExceptionFilter
ExitProcess
CreateDirectoryExA
EnumSystemLocalesA
ReadFile
LCMapStringW
GetCompressedFileSizeA
GetCPInfo
HeapDestroy
DeleteFiber
GetDateFormatA
SetCriticalSectionSpinCount
QueryPerformanceCounter
LoadLibraryA
GetSystemTimeAsFileTime
GetModuleHandleA
Sleep
GetFileType
GetTimeZoneInformation
SetHandleCount
FindResourceExA
TlsFree
LCMapStringA
HeapSize
SetFileAttributesW
WriteConsoleW
SetStdHandle
CreateMutexA
GetLastError
ResumeThread
DeleteCriticalSection
GetConsoleCP
GetTickCount
IsDebuggerPresent
FreeLibrary
CompareStringW
HeapReAlloc
GetLocaleInfoW
VirtualQuery
lstrcpy
GetModuleFileNameW
GetStartupInfoW
HeapAlloc
GetLocaleInfoA
TlsSetValue
Sections
.text Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 357KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ