Static task
static1
Behavioral task
behavioral1
Sample
c143d8ede803ca610ab314d1553ef9ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c143d8ede803ca610ab314d1553ef9ce_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c143d8ede803ca610ab314d1553ef9ce_JaffaCakes118
-
Size
155KB
-
MD5
c143d8ede803ca610ab314d1553ef9ce
-
SHA1
449148e08f2e25cc7a8a8895803e46e10bc0bbb7
-
SHA256
ef685a96fb8b77644912c0cd7d8e87481f105e6237109b34e000ea8f4cb9b7b9
-
SHA512
7a6973f221ff412e1f538889a419904552ab1a48f36be54bfa2ad2084dd8fb60a9e8a6d7ede00224e5ede4e860085dbcb6f6bbd6aa01a6260d803c307d033778
-
SSDEEP
768:fXtuCNba87ebyOqAILhDBtEhd0Vovonk:fXj48vOUrtEhtx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c143d8ede803ca610ab314d1553ef9ce_JaffaCakes118
Files
-
c143d8ede803ca610ab314d1553ef9ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
c3dabbbfd7dc35ce87d6eae020a19f8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
FindWindowExA
FindWindowA
ExitWindowsEx
DispatchMessageA
DefWindowProcA
CreateWindowExA
TranslateMessage
SetTimer
SetForegroundWindow
ReleaseDC
RegisterClassExA
PostQuitMessage
PostMessageA
LoadIconA
LoadCursorA
KillTimer
IsWindow
GetWindowThreadProcessId
GetMessageA
GetDC
wsprintfA
kernel32
CreateProcessA
DeleteFileA
ExitProcess
GetCurrentProcess
GetModuleFileNameA
GetStartupInfoA
GetSystemDirectoryA
CreateFileA
GetTempPathA
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
MultiByteToWideChar
OpenProcess
SetEndOfFile
SetFilePointer
Sleep
TerminateProcess
WideCharToMultiByte
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
CloseHandle
GetFileSize
ReadFile
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
advapi32
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
wininet
InternetReadFile
InternetQueryDataAvailable
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
InternetConnectA
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
DeleteUrlCacheEntryA
urlmon
URLDownloadToFileA
gdi32
StretchBlt
SelectObject
TextOutA
GetTextExtentPoint32A
GetObjectA
GetDIBits
DeleteObject
DeleteDC
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
CreateDIBSection
PatBlt
CreateDIBitmap
ole32
CoCreateInstance
OleUninitialize
OleInitialize
oleaut32
SysAllocString
SysFreeString
VariantInit
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 125KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE