Static task
static1
Behavioral task
behavioral1
Sample
bb4b035b35ff88bc7bcfe89fd1a11f37_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bb4b035b35ff88bc7bcfe89fd1a11f37_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb4b035b35ff88bc7bcfe89fd1a11f37_JaffaCakes118
-
Size
207KB
-
MD5
bb4b035b35ff88bc7bcfe89fd1a11f37
-
SHA1
e1463ed9b781ce00c79dffb4db17f8c9bc1d7838
-
SHA256
7139bf83804dc312205fdb21b74ad67db801b456224b5bfefb394333daca25f0
-
SHA512
1ff31490d3c81d207c82f0484a3a4725226d50c08c11c7923a968dfe1da7bdfe194a4f73a142cefaa4e0d384f83bfd21343bc6a76872360be0b9b94226a76a04
-
SSDEEP
3072:g7D6O/KBFowyd7uamyvsiB5V+PGzCCciwLFHmyvn5QgVGcQ9OapooqqtCGp+nyyY:g5iqd7uRy0s+PQTQo97Hpyyy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb4b035b35ff88bc7bcfe89fd1a11f37_JaffaCakes118
Files
-
bb4b035b35ff88bc7bcfe89fd1a11f37_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3699c067617dbfa9e662ae8cd47c2cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
GetDriveTypeW
AreFileApisANSI
lstrcatW
Sleep
lstrlenW
WaitForMultipleObjects
SetPriorityClass
GetVersionExW
GetCommandLineW
ReadFile
GetStdHandle
WriteFile
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventW
SetEvent
InitializeCriticalSection
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
LoadLibraryExW
LoadLibraryW
LocalFree
FormatMessageW
GetWindowsDirectoryW
SetFileTime
SetCurrentDirectoryW
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryW
DeleteFileW
GetFullPathNameW
GetCurrentDirectoryW
SearchPathW
GetTempPathW
GetTempFileNameW
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
SetFilePointer
DeviceIoControl
SetEndOfFile
FileTimeToSystemTime
GetSystemInfo
GlobalMemoryStatus
GetModuleHandleW
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
FileTimeToLocalFileTime
GetProcAddress
GetModuleFileNameW
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
DeleteCriticalSection
GetCurrentProcess
GetProcessTimes
GetTickCount
EnterCriticalSection
LeaveCriticalSection
OpenFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateFileW
OpenEventW
user32
CharUpperW
MessageBoxW
SetTimer
SendMessageW
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
LoadStringW
DialogBoxParamW
SetWindowLongW
GetWindowLongW
SystemParametersInfoW
PostMessageW
LoadCursorW
SetCursor
MapDialogRect
ScreenToClient
InvalidateRect
MoveWindow
GetWindowRect
LoadIconW
IsWindowEnabled
IsDlgButtonChecked
SetWindowTextW
CheckDlgButton
wsprintfW
KillTimer
EndDialog
EnableWindow
SetDlgItemTextW
ShowWindow
comdlg32
GetOpenFileNameW
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
ole32
CoUninitialize
CoInitialize
oleaut32
SysStringByteLen
SysAllocString
VariantCopy
VariantClear
comctl32
ord17
msvcrt
_exit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_except_handler3
_beginthreadex
free
malloc
wcslen
memset
_purecall
memcpy
memcmp
memmove
_CxxThrowException
__CxxFrameHandler
_iob
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_fileno
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_isatty
_XcptFilter
Sections
.text Size: 153KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ