Static task
static1
Behavioral task
behavioral1
Sample
c8eeb4dcf24b4835e46ea4e56679bf94_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c8eeb4dcf24b4835e46ea4e56679bf94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8eeb4dcf24b4835e46ea4e56679bf94_JaffaCakes118
-
Size
596KB
-
MD5
c8eeb4dcf24b4835e46ea4e56679bf94
-
SHA1
da1154bdae4d645a7cd4dd941b1f96aa5e04a0c5
-
SHA256
ad79a38f6d989c19723da01aaca7b638eb8f3ab73494df4c8888a0a90a9d2784
-
SHA512
7b06c5a851fc98108dc058735937a4861911bd07be40fe64890b1bb9c10e9b42697455ffb8fb4447957d757a2cff2598058a2462581e9656b9430043a774dc32
-
SSDEEP
12288:bdlWHSxGQDt9xYznm9HNF41qGJZLtIHRAV4G6GR/RmSg/ysjZg:bdluSoQh9Sp/fp1WG6GR/8/y/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8eeb4dcf24b4835e46ea4e56679bf94_JaffaCakes118
Files
-
c8eeb4dcf24b4835e46ea4e56679bf94_JaffaCakes118.exe windows:4 windows x86 arch:x86
36eb2066fe3038556379113e472a4587
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
GetLocaleInfoW
ConnectNamedPipe
ExpandEnvironmentStringsW
CompareStringA
LeaveCriticalSection
SetLastError
EnterCriticalSection
TlsFree
GetVersion
FindFirstFileExA
GetModuleHandleA
VirtualQuery
GetStartupInfoA
HeapFree
GetCurrentThread
GetVersionExW
GetOEMCP
GetSystemDirectoryA
MoveFileA
SetConsoleTextAttribute
CompareStringW
GetLocalTime
VirtualFree
ReadConsoleInputA
GetEnvironmentStringsW
SetComputerNameA
FillConsoleOutputCharacterA
GetPrivateProfileSectionA
GetACP
CreateProcessW
CreateNamedPipeA
GetCurrentProcess
TlsGetValue
FlushFileBuffers
GetCurrentDirectoryA
FindNextFileW
SetLocaleInfoW
SetStdHandle
InterlockedDecrement
CloseHandle
GetModuleFileNameW
GetEnvironmentStrings
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTimeZoneInformation
VirtualAlloc
LoadLibraryA
FreeEnvironmentStringsA
OpenMutexW
GlobalGetAtomNameW
lstrcpynA
GlobalAlloc
GetStringTypeW
EnumDateFormatsW
QueryPerformanceCounter
InterlockedExchange
SetFilePointer
CreateThread
GlobalFlags
RtlUnwind
GetCommandLineA
SetSystemTime
ResetEvent
GetNamedPipeHandleStateW
GetLastError
GetCurrentProcessId
WaitForSingleObjectEx
GetCPInfo
GetFileType
MultiByteToWideChar
HeapAlloc
HeapReAlloc
GetStdHandle
GetTickCount
OpenWaitableTimerA
SetEnvironmentVariableA
MoveFileExW
ExitProcess
LCMapStringW
SetHandleCount
TlsSetValue
InterlockedIncrement
GetUserDefaultLCID
GetProcAddress
WriteConsoleW
HeapDestroy
GetThreadContext
ReadConsoleOutputAttribute
RemoveDirectoryA
GetModuleFileNameA
FreeEnvironmentStringsW
GetDateFormatW
SetConsoleMode
TerminateProcess
WaitForMultipleObjectsEx
UnhandledExceptionFilter
GetStringTypeA
WriteFile
DebugBreak
GetVersionExA
EnumDateFormatsA
DeleteCriticalSection
ReadFile
CreateEventW
LCMapStringA
HeapCreate
GetSystemTime
GetVolumeInformationW
GetCalendarInfoW
OpenMutexA
TlsAlloc
FindResourceExW
GetProfileSectionA
WideCharToMultiByte
EnumCalendarInfoExA
CreateMutexA
InitializeCriticalSection
user32
SetSystemCursor
MessageBoxExA
UnpackDDElParam
CreateCursor
TranslateAccelerator
GetCursor
MapWindowPoints
RegisterClassA
SetClipboardData
GetClassInfoExW
GetMenuItemID
MessageBoxW
SendDlgItemMessageA
ShowWindow
SetPropW
GetUpdateRgn
GetKeyNameTextW
VkKeyScanExW
SetMenuInfo
DlgDirSelectComboBoxExW
EndMenu
GetWindowRgn
SendNotifyMessageW
OemToCharBuffA
InflateRect
FindWindowA
GetQueueStatus
SetMenuContextHelpId
InsertMenuW
wvsprintfA
DlgDirSelectExA
DlgDirSelectExW
DefMDIChildProcA
CreateIconFromResource
SendIMEMessageExA
MsgWaitForMultipleObjectsEx
CreateWindowExA
CharNextA
EnableScrollBar
DdeInitializeW
LoadBitmapA
IntersectRect
CheckRadioButton
SetThreadDesktop
LoadKeyboardLayoutW
SetClassWord
IsCharAlphaNumericW
DestroyWindow
TrackPopupMenuEx
SendInput
GetClipboardFormatNameW
SetRect
IsCharLowerA
GetGuiResources
RegisterClipboardFormatW
GetClassLongW
GetUserObjectInformationA
RegisterClassExA
DefWindowProcA
DestroyMenu
IsCharUpperA
MapVirtualKeyExA
GetMenuState
DefWindowProcW
comctl32
ImageList_GetDragImage
ImageList_DragEnter
InitMUILanguage
ImageList_SetDragCursorImage
CreateToolbarEx
ImageList_SetIconSize
CreateToolbar
ImageList_ReplaceIcon
CreateUpDownControl
ImageList_GetIcon
ImageList_LoadImageW
ImageList_GetImageCount
CreatePropertySheetPageA
DestroyPropertySheetPage
ImageList_DrawIndirect
_TrackMouseEvent
DrawStatusText
ImageList_Create
ImageList_Duplicate
CreateStatusWindow
InitCommonControlsEx
DrawStatusTextA
ImageList_Add
ImageList_Draw
Sections
.text Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ