Static task
static1
Behavioral task
behavioral1
Sample
c201d237c9c77b8283e9dfad72da6ea4_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c201d237c9c77b8283e9dfad72da6ea4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c201d237c9c77b8283e9dfad72da6ea4_JaffaCakes118
-
Size
360KB
-
MD5
c201d237c9c77b8283e9dfad72da6ea4
-
SHA1
cad52308caec23304c57f78f7d509d05670b1620
-
SHA256
9f105f45e8da7365b736132c1378de7b0c22c225cc3f0f4969d6b1e287a495a6
-
SHA512
1684569d5c8d9d41a1f955444084afba31d7566b78aa7929f43d5a63f9b39eb0aa02eaefea2e10e203626b2d87b13a168cbb14f568bbcd3eb73dfc9b5708c90f
-
SSDEEP
6144:SHfUIijDRMpHvWHbVcJSi0ldBCkIaHmqM7XVSUOUeVUvsoAgbFf:CfPijDOpHeUSi0FCywXdOUeVUvsoAgR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c201d237c9c77b8283e9dfad72da6ea4_JaffaCakes118
Files
-
c201d237c9c77b8283e9dfad72da6ea4_JaffaCakes118.exe windows:4 windows x86 arch:x86
1810527fc112673892c5aa7308ecaf2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragQueryFileA
InternalExtractIconListA
SHGetFileInfoW
comctl32
MakeDragList
ImageList_LoadImageW
CreatePropertySheetPage
InitCommonControlsEx
DrawStatusTextA
ImageList_BeginDrag
ImageList_SetDragCursorImage
CreatePropertySheetPageA
_TrackMouseEvent
ImageList_Write
ImageList_ReplaceIcon
ImageList_AddIcon
ImageList_DrawEx
kernel32
GetDiskFreeSpaceA
CloseHandle
GetSystemInfo
FreeEnvironmentStringsA
SetHandleCount
HeapCreate
OpenMutexA
SetEnvironmentVariableA
GetTickCount
GetLocaleInfoW
WritePrivateProfileSectionA
WriteProfileSectionA
SetFilePointer
CopyFileExA
CompareStringA
GetLogicalDriveStringsA
lstrlen
VirtualProtect
GetStringTypeA
GetStartupInfoA
LeaveCriticalSection
GetSystemTimeAsFileTime
SetConsoleCursorPosition
GetLocaleInfoA
WriteProfileStringW
TlsAlloc
GetModuleFileNameA
FindFirstFileA
DeleteCriticalSection
LCMapStringW
WriteFile
GetCommandLineA
SetSystemTime
RtlUnwind
GetLongPathNameA
DebugActiveProcess
InitializeCriticalSection
GetCurrentDirectoryW
WideCharToMultiByte
GetSystemDefaultLCID
SetLastError
HeapReAlloc
GetCPInfo
IsValidCodePage
GetCurrentThread
GlobalUnfix
ExitProcess
FillConsoleOutputCharacterW
IsValidLocale
VirtualQuery
QueryPerformanceCounter
GetTimeZoneInformation
TlsGetValue
GetEnvironmentStrings
GetUserDefaultLCID
GetProcAddress
WaitNamedPipeW
LCMapStringA
EnumSystemLocalesA
GetLogicalDrives
CreateDirectoryExW
ConnectNamedPipe
GetVersionExW
WaitForSingleObjectEx
GetCurrencyFormatA
GetFullPathNameA
TlsFree
GetStringTypeW
HeapFree
FlushFileBuffers
TlsSetValue
GetStdHandle
GetModuleHandleA
VirtualFree
GetCurrentProcessId
CreateMutexA
CompareStringW
InterlockedExchangeAdd
GetLastError
MultiByteToWideChar
UnhandledExceptionFilter
GetCurrentProcess
GetOEMCP
GetDateFormatA
GetFileType
GetACP
GetCurrentThreadId
WriteConsoleW
MoveFileExW
EnterCriticalSection
LocalFileTimeToFileTime
GetSystemDirectoryA
EnumCalendarInfoExA
ReadFile
InterlockedCompareExchange
HeapDestroy
HeapSize
IsBadWritePtr
InterlockedExchange
VirtualAlloc
SetThreadPriority
RemoveDirectoryW
GetEnvironmentStringsW
TerminateProcess
GetShortPathNameW
GetTimeFormatA
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
LoadLibraryA
HeapAlloc
GetEnvironmentVariableW
GetVersionExA
SetConsoleCtrlHandler
user32
GetDialogBaseUnits
DestroyWindow
BeginDeferWindowPos
GetScrollPos
RegisterClassA
LoadMenuIndirectW
CreateCaret
ShowWindow
GetMessageTime
RegisterClassExA
SetWindowLongA
PostMessageW
NotifyWinEvent
SendIMEMessageExA
CreatePopupMenu
GetDoubleClickTime
GetWindow
CreateWindowExW
UnhookWindowsHook
MessageBoxA
InvalidateRgn
DefWindowProcW
comdlg32
PageSetupDlgW
gdi32
ResizePalette
Sections
.text Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ