Static task
static1
Behavioral task
behavioral1
Sample
cde0c7634d38a534185c6c17a0f0fc61_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cde0c7634d38a534185c6c17a0f0fc61_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
cde0c7634d38a534185c6c17a0f0fc61_JaffaCakes118
-
Size
1.4MB
-
MD5
cde0c7634d38a534185c6c17a0f0fc61
-
SHA1
ff56c0b4616a2af85ff80af800581fffadd1ebcd
-
SHA256
7d1ff4c8e24878f84215cf3751502bdb016dc17b14451926d9a47cc4bc48f91f
-
SHA512
cc00866a8d9c45d94a976f67537cda75adfb12ab3109a0a932c52ff21028320323b33f1cd366ff30f7ccdbd85102bc9452401bfece43c012524a7ac5fbe623a4
-
SSDEEP
24576:euWuwMMtb5uENZehsWHqli9LWOnXOZ/rER37cVi7BoC3Z:TWuwMybelFEOXO/EF93Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cde0c7634d38a534185c6c17a0f0fc61_JaffaCakes118
Files
-
cde0c7634d38a534185c6c17a0f0fc61_JaffaCakes118.exe windows:5 windows x86 arch:x86
be550b3359663e3fa2d0e3db5b44fc0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
VarBstrFromDate
SysFreeString
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayUnaccessData
CreateErrorInfo
SetErrorInfo
RegisterTypeLi
LoadTypeLi
VarNeg
VarBstrFromBool
SysReAllocStringLen
VarCyFromStr
VarR8FromStr
VariantChangeType
VariantCopyInd
VariantClear
SafeArrayPtrOfIndex
comdlg32
ChooseColorW
ChooseFontW
comctl32
FlatSB_SetScrollProp
FlatSB_GetScrollPos
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_Read
ImageList_GetDragImage
ImageList_Copy
ImageList_GetIcon
ImageList_Remove
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_AddMasked
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_Destroy
kernel32
IsProcessorFeaturePresent
RtlUnwind
OutputDebugStringW
GetStringTypeW
HeapSize
LCMapStringW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
IsValidCodePage
GetProcAddress
GlobalFree
VirtualAlloc
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetCurrentThreadId
GetLastError
GetFileType
FindClose
CloseHandle
MulDiv
FormatMessageW
lstrcmpiW
TlsAlloc
CreateEventW
LoadLibraryExW
GetModuleFileNameW
GetFullPathNameW
DeleteFileW
FindFirstFileW
QueryPerformanceCounter
CreateFileW
GetCPInfo
WideCharToMultiByte
CompareStringW
GetUserDefaultLCID
IsDebuggerPresent
GetOEMCP
GetACP
LeaveCriticalSection
EnterCriticalSection
GetCommandLineW
SetLastError
EncodePointer
DecodePointer
GetModuleHandleExW
MultiByteToWideChar
GetProcessHeap
GetStdHandle
DeleteCriticalSection
GetStartupInfoW
WriteFile
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
ole32
CoTaskMemAlloc
CoTaskMemFree
PropVariantClear
ReleaseStgMedium
CLSIDFromProgID
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.414l Size: 284KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.n9a4d Size: 686KB - Virtual size: 689KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ