Static task
static1
Behavioral task
behavioral1
Sample
d4207ed4d812d53fdd31e6edeefce3f8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4207ed4d812d53fdd31e6edeefce3f8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d4207ed4d812d53fdd31e6edeefce3f8_JaffaCakes118
-
Size
340KB
-
MD5
d4207ed4d812d53fdd31e6edeefce3f8
-
SHA1
091d60722af089131f1d806d4f1baaa473b97494
-
SHA256
efb42020ff205d221eaf067ccddfc1ef6dedd47fe60b2b2aeca0a594f60a46bb
-
SHA512
c20184546f7c5b1ca1aa09407c396f0dfe4d4a768dba50b888dfec5f56229ba5989b6013e8e5f1f77a5eea8cd1e562e5ee2685873cf254b5981f66494f55f9d7
-
SSDEEP
6144:floqHKWpXhCBULhbfM56ouAU/ZYaOeaohpNmpuzlgQF/AswpWzAYNM//oalqG0q:frpdND5o7UTao7Nv7F/AsW/4Bq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4207ed4d812d53fdd31e6edeefce3f8_JaffaCakes118
Files
-
d4207ed4d812d53fdd31e6edeefce3f8_JaffaCakes118.exe windows:4 windows x86 arch:x86
cc0ce2fdb3aa82d1eb965455dc590891
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVolumeInformationW
SetNamedPipeHandleState
ReadConsoleInputW
EnumDateFormatsW
lstrcpynA
VirtualLock
EnumResourceLanguagesW
lstrcatW
VirtualAllocEx
GetSystemTimeAsFileTime
WriteProcessMemory
PurgeComm
GetUserDefaultLCID
GetACP
SetMailslotInfo
SetEnvironmentVariableW
GetNumberFormatW
_lclose
CreateDirectoryA
IsBadWritePtr
IsBadStringPtrA
GetProcessHeap
GetProcessTimes
GetDriveTypeW
RaiseException
GetCommConfig
lstrcmpiW
RemoveDirectoryW
GetLargestConsoleWindowSize
GetShortPathNameA
RemoveDirectoryA
LocalReAlloc
GlobalDeleteAtom
GetCurrentProcess
CancelIo
CloseHandle
VirtualFree
DebugBreak
EnumTimeFormatsW
GetCommState
GlobalAddAtomW
SetVolumeLabelA
SetConsoleWindowInfo
CompareStringW
PeekNamedPipe
CreateMutexW
GetVersion
GetSystemDirectoryW
SetLastError
EnumSystemCodePagesW
VirtualQueryEx
LocalLock
FindCloseChangeNotification
SetThreadPriorityBoost
ClearCommBreak
LoadLibraryExW
IsValidLocale
SetCommTimeouts
AllocConsole
ScrollConsoleScreenBufferA
GetDriveTypeA
IsProcessorFeaturePresent
CreateMutexA
GlobalFlags
WritePrivateProfileSectionA
GetSystemInfo
CompareStringA
GetSystemTime
GetEnvironmentVariableW
GetVersionExA
VirtualProtect
FindNextChangeNotification
OpenFile
GetEnvironmentStringsW
ReadFile
GetUserDefaultLangID
MoveFileW
CreateProcessA
FileTimeToLocalFileTime
GetCommandLineA
_lread
ExitProcess
user32
LoadKeyboardLayoutW
GetSysColor
DialogBoxParamW
ChangeDisplaySettingsExA
DrawEdge
GetClipCursor
SendMessageW
SetCaretBlinkTime
VkKeyScanW
DrawAnimatedRects
GetKeyNameTextA
RegisterWindowMessageA
CloseClipboard
GetDlgItem
SetKeyboardState
GetMenuItemCount
FindWindowA
CreateDialogParamA
CheckMenuRadioItem
SetPropW
EndDeferWindowPos
SendNotifyMessageW
UnhookWindowsHookEx
CharToOemA
SetMenuItemBitmaps
CreateWindowExA
GetWindowContextHelpId
GetKeyboardLayoutNameW
GetWindowTextLengthA
UnhookWinEvent
GetUpdateRgn
wsprintfA
InvalidateRect
GetUserObjectInformationW
DrawTextExA
CharUpperBuffW
GetTabbedTextExtentW
TranslateMessage
TranslateMDISysAccel
TabbedTextOutW
CreateDesktopW
CharNextA
IsRectEmpty
CreateCaret
GetLastActivePopup
ShowScrollBar
GetMenuItemInfoW
SetUserObjectInformationW
CharUpperW
GetWindowTextA
gdi32
CreateEnhMetaFileA
CreateCompatibleBitmap
GetClipRgn
comdlg32
GetSaveFileNameW
FindTextA
GetFileTitleA
advapi32
LookupPrivilegeValueW
CryptDeriveKey
shell32
Shell_NotifyIconA
DragQueryPoint
SHLoadInProc
ole32
CoCreateInstance
OleCreate
CoRegisterMallocSpy
oleaut32
SafeArrayGetLBound
LoadTypeLibEx
QueryPathOfRegTypeLi
comctl32
ImageList_SetIconSize
ImageList_DragEnter
ImageList_DragLeave
shlwapi
PathAppendA
PathFindExtensionW
Sections
.text Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE