Static task
static1
Behavioral task
behavioral1
Sample
d0a918898acbb7bc2e2339ffb7d7d8db_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d0a918898acbb7bc2e2339ffb7d7d8db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d0a918898acbb7bc2e2339ffb7d7d8db_JaffaCakes118
-
Size
172KB
-
MD5
d0a918898acbb7bc2e2339ffb7d7d8db
-
SHA1
c66e336d9a8b4851c3a49da1838cd8bf1bb9ccac
-
SHA256
5ae99f3e1a93b0cf105e60f810e6a04f0204827b6549e91b14b1e170431f5868
-
SHA512
6aa29a5121fadcbc7301af60f79f2c78bc8fb1c3d538cff94a83f121b96ddc8fe4a8f402238e3f9dd3e4c932f34ecaa466663e17c4dec0da8f420078f96b117f
-
SSDEEP
3072:n8CtjmD3Dife1AsvO//ta2CWmq/504VPGtwfH7PdhtHBcp8tnBVJ7Aqn2OP:n8ajmviGFe/A2Z5lVutClhhBcpuRAq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0a918898acbb7bc2e2339ffb7d7d8db_JaffaCakes118
Files
-
d0a918898acbb7bc2e2339ffb7d7d8db_JaffaCakes118.exe windows:4 windows x86 arch:x86
0ba82c9e3a40a11a8cfab325bdbc0a2f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
ReadFileScatter
EndUpdateResourceA
GetFileSize
HeapReAlloc
SetFileAttributesA
OpenThread
GetFileAttributesExA
EnumResourceNamesA
CreateFileA
IsBadWritePtr
MoveFileExA
OpenMutexA
GetPrivateProfileStructA
ProcessIdToSessionId
DebugBreak
WriteConsoleOutputCharacterW
GetCurrentThread
ClearCommError
WinExec
DefineDosDeviceA
GetLogicalDriveStringsA
FindFirstVolumeMountPointW
SetConsoleMaximumWindowSize
TransactNamedPipe
SetThreadPriorityBoost
SuspendThread
OutputDebugStringA
GetThreadPriorityBoost
SetConsoleTextAttribute
GetConsoleWindow
TerminateThread
GetConsoleAliasesLengthA
GetThreadTimes
Heap32First
GetVolumePathNameA
GlobalSize
ReadConsoleOutputCharacterA
GetConsoleOutputCP
GetUserDefaultLCID
OpenWaitableTimerA
GetFileSizeEx
OpenFileMappingA
FindNextVolumeMountPointW
GetComputerNameA
MapViewOfFileEx
LocalLock
GetDefaultCommConfigA
GetVersionExA
FormatMessageA
QueryInformationJobObject
Sleep
GetCommandLineA
GetConsoleAliasesLengthW
SetComputerNameExA
GetProcessTimes
GetDriveTypeA
GetVDMCurrentDirectories
ReleaseSemaphore
FileTimeToLocalFileTime
ReadConsoleOutputCharacterA
GetSystemDefaultLangID
GetConsoleCursorMode
GetConsoleMode
IsDebuggerPresent
SetFileTime
VirtualAllocEx
GetNumberFormatA
SetUnhandledExceptionFilter
GetConsoleAliasExesLengthA
GetCommTimeouts
IsValidLanguageGroup
FindNextVolumeMountPointA
WriteConsoleOutputCharacterA
CancelWaitableTimer
Process32First
SetInformationJobObject
GetThreadContext
IsBadStringPtrA
FillConsoleOutputCharacterA
VirtualLock
QueueUserWorkItem
ChangeTimerQueueTimer
GetLocalTime
GetEnvironmentStringsA
lstrcpyA
GetConsoleAliasExesW
UnmapViewOfFile
CopyFileExA
FindResourceExW
winmm
timeGetSystemTime
user32
EnumChildWindows
GetClipboardOwner
SetClassWord
GetKeyboardLayoutNameA
SwapMouseButton
ExitWindowsEx
EnumDisplaySettingsA
TranslateMessage
GetWindowTextA
GetInputState
ReplyMessage
DlgDirSelectExA
DialogBoxParamA
GetClassNameA
ExcludeUpdateRgn
SetWindowRgn
OpenInputDesktop
FlashWindow
OpenIcon
ArrangeIconicWindows
PostThreadMessageA
EndMenu
BuildReasonArray
CalcMenuBar
GetScrollInfo
CreateWindowExA
RegisterRawInputDevices
UnregisterHotKey
CopyRect
GetKeyState
SetFocus
CharNextExA
GetAltTabInfoA
GetWindowRgnBox
DrawStateA
GetDialogBaseUnits
MenuWindowProcA
SetDlgItemInt
LockWindowUpdate
LockSetForegroundWindow
EnterReaderModeHelper
SetCaretPos
CreateIconIndirect
DialogBoxParamA
GetForegroundWindow
CharLowerBuffA
EnterReaderModeHelper
OpenInputDesktop
OpenWindowStationA
IsCharUpperA
GetAltTabInfoA
GetKeyNameTextA
SetWindowsHookExA
GetClipboardData
TabbedTextOutA
RealGetWindowClassA
SetWindowLongA
SetThreadDesktop
SetSystemCursor
BeginDeferWindowPos
ShowCursor
GetMessagePos
EnumPropsExW
IsCharAlphaNumericW
EnableMenuItem
TranslateMessage
MapWindowPoints
SetCursor
RealGetWindowClassA
KillTimer
GetNextDlgTabItem
EditWndProc
UnregisterDeviceNotification
SetScrollRange
OpenClipboard
LoadImageA
InsertMenuA
KillTimer
EndDeferWindowPos
CloseWindow
SetCaretBlinkTime
SetClipboardData
MenuWindowProcA
NotifyWinEvent
SetActiveWindow
TranslateAccelerator
OemKeyScan
MessageBoxA
Sections
.idata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.itext Size: 156KB - Virtual size: 157KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ