Static task
static1
Behavioral task
behavioral1
Sample
c8b20a9840449135700db9a10756ca11_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8b20a9840449135700db9a10756ca11_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8b20a9840449135700db9a10756ca11_JaffaCakes118
-
Size
308KB
-
MD5
c8b20a9840449135700db9a10756ca11
-
SHA1
a64da650e4b844e50ca61074ef1b086be6b63446
-
SHA256
d55d6ef364ea5c3d21e0ef314027726208e1093fc318d6fcaffc0e418010907c
-
SHA512
aebcbf90a5d165fe17b16060e9c4aee327c67472ecc0bf09aae844b4b44ef5454e3f0ec918c3cb7d4204030ee4e4a70f34acad9242692c7cedbdf3f03d7a5067
-
SSDEEP
6144:UwnPgEQ9DrbX3oabVhHoKvkoNPOnPPn9dm2t3isL0Ws+fH:fPlQ9fbnHDcmMH9dmCis5dH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8b20a9840449135700db9a10756ca11_JaffaCakes118
Files
-
c8b20a9840449135700db9a10756ca11_JaffaCakes118.exe windows:5 windows x86 arch:x86
08435ef6268bd0b122a273cf401ea2e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
closesocket
accept
WSAUnhookBlockingHook
kernel32
HeapSize
HeapReAlloc
VirtualAlloc
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
GetCPInfo
GetFileType
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
WriteFile
RtlUnwind
GetOEMCP
IsValidCodePage
MultiByteToWideChar
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
lstrlenA
FreeLibrary
LoadLibraryA
IsBadCodePtr
UnlockFile
FreeEnvironmentStringsW
FindNextVolumeMountPointW
GetModuleFileNameA
TlsGetValue
CreateMutexA
GetLastError
lstrcmpiA
FlushConsoleInputBuffer
TlsAlloc
CreateConsoleScreenBuffer
GetCommandLineA
FlushViewOfFile
FlushInstructionCache
ContinueDebugEvent
CompareStringA
CreateFiber
ReadProcessMemory
GetCalendarInfoW
GetModuleFileNameW
lstrlenW
DisconnectNamedPipe
TlsSetValue
WriteProcessMemory
IsBadStringPtrW
FindCloseChangeNotification
GetCurrentProcess
IsBadHugeReadPtr
TerminateJobObject
GetModuleHandleA
GetAtomNameW
IsBadReadPtr
DuplicateHandle
IsBadHugeWritePtr
lstrcatA
lstrcmpA
IsDBCSLeadByteEx
CreateTimerQueue
Sleep
CreateIoCompletionPort
GetCalendarInfoA
CreateFileMappingW
FlushFileBuffers
TerminateProcess
ConvertDefaultLocale
TransmitCommChar
AssignProcessToJobObject
AllocateUserPhysicalPages
lstrcpyA
DebugActiveProcess
FindNextVolumeMountPointA
GetACP
GetProcAddress
IsDBCSLeadByte
IsDebuggerPresent
FreeUserPhysicalPages
ExitProcess
LCMapStringA
LCMapStringW
HeapCreate
EnterCriticalSection
GetSystemTimeAsFileTime
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
DeleteCriticalSection
LeaveCriticalSection
user32
DestroyCaret
WindowFromDC
UpdateLayeredWindow
GetClassWord
SetWindowsHookA
SetWindowsHookExA
mouse_event
DestroyIcon
DlgDirSelectComboBoxExW
GetClassNameW
FreeDDElParam
AllowSetForegroundWindow
GetAsyncKeyState
TrackPopupMenuEx
SetWindowsHookExW
DlgDirListComboBoxA
UnhookWindowsHookEx
ValidateRgn
SystemParametersInfoA
ShowCaret
ExcludeUpdateRgn
GetClipboardData
TabbedTextOutW
EnableScrollBar
VkKeyScanA
DlgDirListA
UnhookWinEvent
DrawMenuBar
MessageBoxA
DestroyMenu
DrawTextW
DlgDirSelectExW
GetCaretPos
gdi32
Pie
SetWindowOrgEx
OffsetRgn
SetSystemPaletteUse
GetMiterLimit
SelectClipRgn
GetKerningPairsA
PatBlt
SetGraphicsMode
GetTextCharset
Rectangle
GetPixelFormat
SetColorSpace
UnrealizeObject
BeginPath
GetTextAlign
GetICMProfileW
GetRasterizerCaps
CreatePen
AbortPath
RestoreDC
CloseMetaFile
GetPolyFillMode
SetDIBColorTable
RemoveFontResourceExW
SelectPalette
UpdateICMRegKeyW
PolyBezier
GetLogColorSpaceW
CombineTransform
GetWinMetaFileBits
OffsetViewportOrgEx
SelectObject
GetTextColor
MoveToEx
CreatePolyPolygonRgn
SetPixelV
CreateDiscardableBitmap
GetStretchBltMode
GetWindowOrgEx
GetMetaRgn
GetViewportOrgEx
UpdateICMRegKeyA
CreateCompatibleBitmap
SelectClipPath
MaskBlt
ColorCorrectPalette
GetLogColorSpaceA
CreateHalftonePalette
OffsetWindowOrgEx
CreateEllipticRgn
RemoveFontMemResourceEx
GetNearestPaletteIndex
ResizePalette
GetTextMetricsA
SetTextCharacterExtra
GetTextCharsetInfo
SetTextColor
GetRgnBox
PolyBezierTo
SetStretchBltMode
CopyEnhMetaFileW
SetPolyFillMode
PlayEnhMetaFile
LineTo
ModifyWorldTransform
SaveDC
GetObjectW
CreateRectRgn
SetMapperFlags
GetNearestColor
GetTextExtentExPointW
AbortDoc
WidenPath
ScaleViewportExtEx
InvertRgn
StrokeAndFillPath
Chord
GetSystemPaletteUse
CreateCompatibleDC
CreateHatchBrush
GetStockObject
ole32
CoCreateInstance
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ