Static task
static1
Behavioral task
behavioral1
Sample
d2448e697763e451dd01654acc6e4dc6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2448e697763e451dd01654acc6e4dc6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d2448e697763e451dd01654acc6e4dc6_JaffaCakes118
-
Size
356KB
-
MD5
d2448e697763e451dd01654acc6e4dc6
-
SHA1
307d0b2a13b8225ca3449d1d2ea39e5df3972be9
-
SHA256
aac60e4bfa562156824e742ba176cbc1d7cd3f9636e1883615b2709f310041c5
-
SHA512
1bb4deb267a78809ce9e6b216630dd5840ac526ed6dda14199671e863e52c66fb1d10577c878114e8626020bb8e631553085894f7343f34265245862da0e84c3
-
SSDEEP
6144:tCiAma+qhYprZKchkc9Uv1i7sTADj8dWqIDiucoxDDGYpMzBL6OR:UiVaF2/39WiszdWqCiucKD3Id
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2448e697763e451dd01654acc6e4dc6_JaffaCakes118
Files
-
d2448e697763e451dd01654acc6e4dc6_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d01c15e706ba21bba584263de2480e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
CreateMappedBitmap
InitCommonControlsEx
_TrackMouseEvent
ImageList_GetDragImage
ImageList_GetImageCount
CreateUpDownControl
ImageList_Merge
ImageList_LoadImageW
kernel32
GetACP
DeleteFiber
GetSystemTimeAsFileTime
FindFirstFileExW
GetCurrentProcess
CompareStringA
HeapReAlloc
ReadFile
GetFileType
FreeEnvironmentStringsA
GetModuleHandleA
GetProcAddress
GetLocalTime
HeapCreate
GetSystemTime
GetCommandLineA
GetCPInfo
GetCurrentThread
EnumResourceNamesW
CompareStringW
CreateMutexA
GetCurrentThreadId
SetFilePointer
CloseHandle
TerminateProcess
SetLastError
WideCharToMultiByte
HeapDestroy
GetLastError
HeapAlloc
CreateFileA
UnhandledExceptionFilter
OpenMutexA
HeapFree
LoadLibraryA
GetStringTypeW
ExitProcess
TlsAlloc
FlushFileBuffers
GetOEMCP
MultiByteToWideChar
GetTimeZoneInformation
VirtualQuery
SetHandleCount
VirtualAlloc
WriteFile
IsBadWritePtr
LeaveCriticalSection
OutputDebugStringW
FreeLibraryAndExitThread
InterlockedIncrement
InitializeCriticalSection
LCMapStringA
TlsSetValue
GetVersion
QueryPerformanceCounter
RtlUnwind
InterlockedExchange
GetModuleFileNameA
OpenEventW
GetCurrentProcessId
TlsGetValue
LCMapStringW
GetStdHandle
InterlockedDecrement
SetEnvironmentVariableA
GetStringTypeA
DeleteCriticalSection
LoadLibraryExW
ReadConsoleW
GetEnvironmentStringsW
SetStdHandle
GetEnvironmentStrings
EnterCriticalSection
VirtualFree
TlsFree
FreeEnvironmentStringsW
GetTickCount
GetStartupInfoA
gdi32
ExtCreateRegion
CloseMetaFile
StartPage
GetSystemPaletteEntries
GetBoundsRect
user32
FindWindowW
GetClipCursor
GetPropA
SetFocus
GetCaretPos
ChangeDisplaySettingsExA
SetThreadDesktop
RemovePropA
MessageBoxW
WinHelpA
CloseClipboard
CheckMenuRadioItem
CreateWindowExA
RegisterClassA
EnumDisplayMonitors
GetSubMenu
InsertMenuA
SetUserObjectInformationW
GetMenuDefaultItem
DefWindowProcW
DrawIcon
SetRect
GetSystemMenu
GetClipboardData
PostThreadMessageA
EnumPropsExW
InvalidateRect
GetUpdateRgn
DdeCreateStringHandleA
SetWindowLongA
DestroyWindow
ShowWindow
GetLastActivePopup
SetWindowTextA
DispatchMessageW
EndTask
OpenClipboard
LoadMenuIndirectA
RegisterClassExA
OpenInputDesktop
UnregisterClassA
DefWindowProcA
IsCharLowerA
AppendMenuA
LoadKeyboardLayoutW
MonitorFromRect
DdeQueryStringW
UnhookWindowsHook
TranslateAccelerator
IsRectEmpty
SetWinEventHook
WINNLSGetEnableStatus
EnumThreadWindows
MessageBoxExA
GetUserObjectInformationA
DefDlgProcA
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ