Static task
static1
Behavioral task
behavioral1
Sample
bb230dad002efeca9af9ee27cfc21f00_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb230dad002efeca9af9ee27cfc21f00_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb230dad002efeca9af9ee27cfc21f00_JaffaCakes118
-
Size
352KB
-
MD5
bb230dad002efeca9af9ee27cfc21f00
-
SHA1
31ff3627c8ba6c270ee41b48cc8551e0e56ffd7e
-
SHA256
ad96b602d30448bff21b2d8e87584688301e037b41ab2abcdc52a09aaeff0424
-
SHA512
4f79be068c323ab0e4abfb019e20e1e65ae4091cf21bf9d13f246a58b482bdc77bf50063f6726a319309feece3453f255c1d552c08e086ec495fa01553b9fba3
-
SSDEEP
6144:mM4qaFjGIE1whBasNflQkEx1VayqrPs7TC3H+dxhIiJ8q8L888d88B8D18npKO6:m/qaFjGInB3IVaf6TWHYuiST
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb230dad002efeca9af9ee27cfc21f00_JaffaCakes118
Files
-
bb230dad002efeca9af9ee27cfc21f00_JaffaCakes118.exe windows:4 windows x86 arch:x86
a120e44bf9e1fa21928c60276fba0787
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
FindCloseUrlCache
CreateUrlCacheEntryA
comctl32
DrawStatusTextA
InitCommonControlsEx
advapi32
LookupSecurityDescriptorPartsW
CryptDuplicateKey
RegConnectRegistryA
CryptGetHashParam
CryptDestroyKey
RegDeleteValueW
RegCreateKeyW
RegDeleteKeyW
LookupAccountNameW
CreateServiceA
CryptGetDefaultProviderA
kernel32
SetEnvironmentVariableA
HeapDestroy
RtlUnwind
GetEnvironmentStringsW
CompareStringW
WriteConsoleOutputA
SetStdHandle
DeleteCriticalSection
GetCurrentThread
OpenMutexA
LeaveCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
TlsSetValue
GetCurrentProcessId
GetStringTypeA
SetHandleCount
TlsFree
LCMapStringW
EnumSystemLocalesW
VirtualQuery
ExitProcess
GetModuleFileNameA
GetTimeZoneInformation
TlsAlloc
FlushConsoleInputBuffer
VirtualAlloc
GetModuleHandleA
InitializeCriticalSection
GetLocaleInfoW
CreateMutexA
TerminateProcess
FlushFileBuffers
UnhandledExceptionFilter
IsValidCodePage
GlobalAddAtomA
GetCPInfo
VirtualFree
GetTimeFormatA
GetSystemTimeAsFileTime
GetCommandLineA
GetLastError
WideCharToMultiByte
HeapReAlloc
ReadFile
GetSystemInfo
SetConsoleCP
GetACP
GetProcAddress
GetOEMCP
FreeEnvironmentStringsW
HeapSize
HeapCreate
InterlockedExchange
WriteFile
GetStartupInfoA
MoveFileA
GetTickCount
EnumSystemLocalesA
VirtualProtect
EnterCriticalSection
GetFileType
GetLocaleInfoA
MultiByteToWideChar
CreateEventA
GetStringTypeW
LoadLibraryW
IsBadWritePtr
SetLastError
SetFilePointer
LoadLibraryA
CloseHandle
GetEnvironmentStrings
GetVersionExA
CompareStringA
GetCurrentProcess
HeapFree
IsValidLocale
LCMapStringA
TlsGetValue
GetPrivateProfileStructA
HeapAlloc
FreeEnvironmentStringsA
GetUserDefaultLCID
EnumResourceTypesW
GetStdHandle
GetDateFormatA
gdi32
ResetDCA
EnumObjects
AngleArc
GetEnhMetaFileDescriptionA
CheckColorsInGamut
CreateBitmapIndirect
SetAbortProc
ScaleWindowExtEx
TextOutW
GetViewportExtEx
CreateICA
EnumICMProfilesW
OffsetViewportOrgEx
GetObjectA
CreateScalableFontResourceA
DeviceCapabilitiesExA
CreateDCA
SetPixel
GetGlyphOutlineA
user32
RegisterClipboardFormatA
TrackPopupMenu
UnhookWinEvent
DialogBoxIndirectParamA
GetWindowPlacement
DrawTextExA
RegisterClassExA
RegisterClassA
GetMenuStringA
CreateWindowStationW
GetClassNameW
GetSubMenu
GetAsyncKeyState
GetWindowLongA
SendDlgItemMessageW
InvalidateRect
SetMenuContextHelpId
DestroyCaret
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ShowOwnedPopups
GetScrollRange
SwitchToThisWindow
GetQueueStatus
ChildWindowFromPointEx
GetClassInfoExA
DefMDIChildProcA
InsertMenuA
GetClipboardFormatNameW
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ