Static task
static1
Behavioral task
behavioral1
Sample
ce606aa021cefbe5e6596e2fd376a53c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce606aa021cefbe5e6596e2fd376a53c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ce606aa021cefbe5e6596e2fd376a53c_JaffaCakes118
-
Size
514KB
-
MD5
ce606aa021cefbe5e6596e2fd376a53c
-
SHA1
8c905ae784b35bc9a550a34abffac626432c5bf2
-
SHA256
d1989264e650de742efb671341098091fc86a23515e00a5cf990ee7c733d27f6
-
SHA512
4499ae6f8475068fe8dd615d3955fca00af90140f5b67c092ace93422fc4bc02a8444cb0c65ed94000118aa708ecc5e9d202c00eaf4cf917865de4150c4f9989
-
SSDEEP
12288:nl7BId7Dk011/eFOzEPV0QPHZ73c93TlAdbEBU:nlNIZQ011/eFFVfPupAdb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce606aa021cefbe5e6596e2fd376a53c_JaffaCakes118
Files
-
ce606aa021cefbe5e6596e2fd376a53c_JaffaCakes118.exe windows:4 windows x86 arch:x86
093bbd2ad70b495bae65050a34b41100
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionW
GetSystemInfo
LCMapStringA
GetCurrentThread
VirtualProtect
GetStringTypeA
HeapReAlloc
GetCurrentProcess
TlsFree
GetStdHandle
SetLastError
GetLocaleInfoA
LCMapStringW
GetTickCount
GetCommandLineW
GetLocaleInfoW
TlsGetValue
UnhandledExceptionFilter
HeapAlloc
QueryPerformanceCounter
GetTimeFormatA
TerminateProcess
SetEnvironmentVariableA
CreatePipe
CommConfigDialogW
LoadLibraryA
EnumSystemLocalesA
HeapFree
ReadFile
DeleteFiber
GetStartupInfoW
GetProcAddress
IsValidLocale
GetOEMCP
GetVersionExA
GetCurrentThreadId
CompareStringA
GetFileType
GetModuleHandleA
GetACP
IsBadWritePtr
GetStringTypeW
RtlUnwind
CreateMutexA
VirtualQuery
WriteFile
GetEnvironmentStrings
HeapSize
GetModuleFileNameW
GetDateFormatA
InitializeCriticalSection
CompareStringW
InterlockedExchange
GetCommandLineA
CloseHandle
WideCharToMultiByte
OpenMutexA
DeleteCriticalSection
GetTimeZoneInformation
FreeEnvironmentStringsW
SetHandleCount
SetFilePointer
SetStdHandle
GetProfileSectionW
HeapDestroy
FreeEnvironmentStringsA
FlushFileBuffers
GetCPInfo
GetCurrentProcessId
EnumCalendarInfoExA
TlsAlloc
WriteConsoleOutputA
TlsSetValue
CreateMutexW
GetSystemTimeAsFileTime
GetModuleFileNameA
VirtualFree
VirtualAlloc
GetFullPathNameW
GetUserDefaultLCID
LeaveCriticalSection
EnterCriticalSection
SetConsoleTitleW
ExitProcess
MultiByteToWideChar
IsValidCodePage
GetLastError
GetStartupInfoA
HeapCreate
GetEnvironmentStringsW
wininet
SetUrlCacheConfigInfoA
InternetTimeToSystemTimeW
GopherGetAttributeW
RetrieveUrlCacheEntryStreamW
comctl32
InitCommonControlsEx
shell32
FindExecutableA
gdi32
SetFontEnumeration
GetKerningPairsA
GetObjectA
GetOutlineTextMetricsW
AngleArc
GetArcDirection
TranslateCharsetInfo
CreateMetaFileW
ExtTextOutW
PolyBezierTo
CreateICA
RealizePalette
SetPixel
GetColorAdjustment
GetGlyphOutlineA
GetTextCharset
Chord
GetBrushOrgEx
GetViewportOrgEx
CreateCompatibleDC
CreateHatchBrush
RemoveFontResourceA
SetEnhMetaFileBits
comdlg32
FindTextW
ReplaceTextA
user32
ReleaseDC
ChangeDisplaySettingsA
DrawTextA
DdeFreeStringHandle
wvsprintfA
SetRectEmpty
GetDlgItemTextA
RegisterClassA
DdeGetData
DdeCreateStringHandleA
RegisterClassExA
CharToOemW
GetCursorInfo
SetProcessWindowStation
PostThreadMessageA
FrameRect
ScrollWindowEx
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ