Static task
static1
Behavioral task
behavioral1
Sample
b76ffa531b0962cbbd9948a9a306c8c2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b76ffa531b0962cbbd9948a9a306c8c2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b76ffa531b0962cbbd9948a9a306c8c2_JaffaCakes118
-
Size
170KB
-
MD5
b76ffa531b0962cbbd9948a9a306c8c2
-
SHA1
91ac4a8959cde187baf0bc35a44ec2a51494edce
-
SHA256
34579d4c5b09babb5472b7ed2355cd79e634911db79e07bb00d6f5577e7cf873
-
SHA512
f070693104e209673fd36c41868cf3eee334311be489dbc2d15f8eb8f03db9d6a526e479da945b6f7ae6e3c3c3a18a045ecbbded48623e0cbc966e91052922ce
-
SSDEEP
3072:+Piwredk8rp3BjN6wWuMHrgGltIe4ut0CnTKhW/yRyKXBp:+PWdhlB57YgGlme4ut0Wx/i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b76ffa531b0962cbbd9948a9a306c8c2_JaffaCakes118
Files
-
b76ffa531b0962cbbd9948a9a306c8c2_JaffaCakes118.exe windows:4 windows x86 arch:x86
3f06adcc0682ded0d8b1b2af5bab95c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SelectPalette
GetRgnBox
GetPaletteEntries
GetBitmapBits
CreateBitmap
GetDIBColorTable
msvcrt
log10
memcpy
memmove
kernel32
CloseHandle
GetModuleHandleA
GetCurrentProcess
GetFileAttributesA
ReadFile
lstrcmpiA
GetVersion
MoveFileA
WriteFile
lstrlenA
Sleep
GetUserDefaultLCID
GetTickCount
GetVersionExA
FindFirstFileA
GetModuleFileNameA
SetEvent
LocalAlloc
SetThreadLocale
LoadLibraryA
MoveFileExA
GetOEMCP
WaitForSingleObject
CreateEventA
FindResourceA
GetDateFormatA
lstrcatA
GlobalAlloc
CreateThread
CreateFileA
GetLastError
SetErrorMode
lstrcmpA
GlobalDeleteAtom
VirtualAllocEx
SetEndOfFile
SetLastError
CompareStringA
GetCurrentThreadId
VirtualFree
GetStringTypeA
SetFilePointer
ExitThread
LoadResource
FormatMessageA
VirtualAlloc
GetCommandLineA
GetProcAddress
SetHandleCount
FreeLibrary
DeleteCriticalSection
VirtualQuery
GetThreadLocale
HeapDestroy
ExitProcess
HeapAlloc
EnterCriticalSection
GetSystemDefaultLangID
RaiseException
GetACP
GetCurrentProcessId
GetLocaleInfoA
GetStartupInfoA
GlobalAddAtomA
GetStringTypeW
GlobalFindAtomA
HeapFree
WideCharToMultiByte
InitializeCriticalSection
user32
GetClientRect
GetClassInfoA
CallWindowProcA
CheckMenuItem
GetDCEx
GetDesktopWindow
GetForegroundWindow
GetParent
DefWindowProcA
BeginPaint
EnableMenuItem
GetWindow
EndDeferWindowPos
MessageBoxA
EnableScrollBar
GetMenuItemCount
DrawEdge
DrawIconEx
GetDlgItem
HideCaret
GetFocus
DefMDIChildProcA
SetCursor
BeginDeferWindowPos
EqualRect
GetPropA
GetCursor
ClientToScreen
IsWindowEnabled
SetWindowLongA
DrawMenuBar
GetMenuStringA
GetKeyNameTextA
DrawFrameControl
FindWindowA
CreateMenu
CreateWindowExA
GetCapture
GetClassLongA
ShowWindow
IsWindowVisible
CharLowerA
FrameRect
SystemParametersInfoA
GetDC
SetTimer
GetClipboardData
DrawIcon
GetActiveWindow
DrawTextA
CharToOemA
CreatePopupMenu
SetWindowTextA
GetMessagePos
TrackPopupMenu
EnumWindows
GetSysColor
FillRect
CreateIcon
GetMenuItemID
GetIconInfo
EnableWindow
GetMenuState
EndPaint
GetMenuItemInfoA
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BSS Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ