Static task
static1
Behavioral task
behavioral1
Sample
d21a4f79ceaf053e7536e7c0b11e8b63_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d21a4f79ceaf053e7536e7c0b11e8b63_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d21a4f79ceaf053e7536e7c0b11e8b63_JaffaCakes118
-
Size
513KB
-
MD5
d21a4f79ceaf053e7536e7c0b11e8b63
-
SHA1
04972bdf0dc4548ad07abad03cb3b74f7c2f8ed3
-
SHA256
5bb76d11a52cbe82b2da6c8102b54875520636d2b54d8577886069b998be4f6d
-
SHA512
cd6052bb55486df4eb766d103dbec7adbb2b8c1d91940412e7d17200bc4a8df359f07c2af21ce9e85dfc8523ddeda37b0f5a9e9e2c1e1ae5904d20ef9ceab076
-
SSDEEP
6144:DM8mAi+iTSZ6e8L4OHntWbjPlhZH1yv0JtL2v+1gB2wkDq2RrI1jm1IZ7Kmpvyhz:PCTPZHEd1yv0JtLvikJlhqAMRbPwm+h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d21a4f79ceaf053e7536e7c0b11e8b63_JaffaCakes118
Files
-
d21a4f79ceaf053e7536e7c0b11e8b63_JaffaCakes118.exe windows:4 windows x86 arch:x86
a6f92bcd1090d269389188a5fde833f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
AbortPath
SetPixelV
GetEnhMetaFilePaletteEntries
ResetDCW
CheckColorsInGamut
DescribePixelFormat
GetFontData
CreateMetaFileA
GetTextExtentPoint32W
SetBkMode
SetBkColor
GetCharWidth32A
PathToRegion
AddFontResourceW
SwapBuffers
StartDocA
StrokePath
SetMiterLimit
CreateICW
ColorMatchToTarget
GetCharABCWidthsA
GetTextMetricsW
wininet
FtpFindFirstFileW
FindFirstUrlCacheEntryExA
GopherGetAttributeW
GetUrlCacheHeaderData
DeleteUrlCacheEntryA
InternetTimeToSystemTimeW
InternetTimeFromSystemTimeA
InternetAlgIdToStringW
user32
CreateWindowExW
ShowWindow
DefMDIChildProcW
RegisterClassW
DrawStateA
DefWindowProcW
CharUpperW
MessageBoxA
RegisterClassExA
DestroyWindow
RegisterClassA
comctl32
ImageList_GetFlags
InitCommonControlsEx
_TrackMouseEvent
ImageList_Replace
CreateStatusWindow
ImageList_AddIcon
ImageList_GetIcon
DrawStatusText
MakeDragList
ImageList_SetImageCount
ImageList_SetBkColor
kernel32
UnhandledExceptionFilter
CloseHandle
GetOEMCP
GetFileType
GetDiskFreeSpaceExW
GetEnvironmentVariableA
GetCurrentThread
IsBadWritePtr
GetCurrentProcessId
MultiByteToWideChar
LoadLibraryA
QueryPerformanceCounter
GetDiskFreeSpaceA
CreateMutexA
FreeEnvironmentStringsW
GetTickCount
GetStringTypeA
GetPrivateProfileStructA
FreeResource
TlsSetValue
ReadFile
GetACP
OpenMutexA
GetCalendarInfoA
GetLastError
RtlUnwind
VirtualQuery
WriteFile
GetCommandLineA
GetStringTypeW
GetProcAddress
GetSystemTimeAsFileTime
WaitCommEvent
GetStdHandle
HeapDestroy
ExitProcess
GetCurrentProcess
HeapReAlloc
GetDateFormatA
SetLastError
GetEnvironmentStrings
FlushFileBuffers
WaitForSingleObject
LCMapStringA
CompareStringW
LeaveCriticalSection
SetStdHandle
WideCharToMultiByte
GetModuleHandleA
TlsFree
GetLocalTime
GetCurrentThreadId
InterlockedIncrement
LCMapStringW
SetEnvironmentVariableA
InterlockedDecrement
GlobalGetAtomNameW
EnterCriticalSection
DuplicateHandle
CompareStringA
HeapCreate
WritePrivateProfileStructA
SetHandleCount
LocalFree
FindResourceExW
GetCPInfo
FreeEnvironmentStringsA
SetFilePointer
GetTimeZoneInformation
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
HeapAlloc
HeapFree
VirtualAlloc
VirtualFree
ReadConsoleInputW
TerminateProcess
InitializeCriticalSection
InterlockedExchange
GetStartupInfoA
GetSystemTime
GetModuleFileNameA
GetVersion
DeleteCriticalSection
CreateFileW
MoveFileExW
Sections
.text Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 208KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ