Static task
static1
Behavioral task
behavioral1
Sample
d5ad4ddf38efb6180b38e94e5dca2bc9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d5ad4ddf38efb6180b38e94e5dca2bc9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d5ad4ddf38efb6180b38e94e5dca2bc9_JaffaCakes118
-
Size
448KB
-
MD5
d5ad4ddf38efb6180b38e94e5dca2bc9
-
SHA1
101dafb78c6545399c465f53ca2a4ce0c7cdb847
-
SHA256
1bc355438b22e097c4d0cf28a43fe3ed7cf8ec3fbea70364b89ef2fd49b280d2
-
SHA512
716535a70acf9041f13905323ca9aa1109c73196886e3cc834f5d3dc0ebc6c5aa1eb1c45a61011197cb31049d9e342765428cbf44fb96422a36c989606077b9b
-
SSDEEP
12288:a/2+jgUX9j9/vRJHo3JlD9galubq/fLH9NLAlkaqOd38v:apjZ9ps3JlhCqrdRAlkaq/v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5ad4ddf38efb6180b38e94e5dca2bc9_JaffaCakes118
Files
-
d5ad4ddf38efb6180b38e94e5dca2bc9_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a384af6bd45556f2f167e6a9d6aa1ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
InterlockedDecrement
InterlockedIncrement
Sleep
GetLastError
CreateDirectoryA
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
SetFileTime
MoveFileA
WriteFile
GetFileSize
GetTickCount
CreateFileA
EnterCriticalSection
LeaveCriticalSection
lstrcmpA
lstrcatA
lstrcpyA
LockResource
LoadResource
SizeofResource
FindResourceA
GetPrivateProfileSectionA
GetCurrentThreadId
lstrlenW
GetModuleHandleA
WideCharToMultiByte
FreeLibrary
LoadLibraryExA
lstrcmpiA
lstrcpynA
SetFileAttributesA
GetCommandLineA
GetVolumeInformationA
GetEnvironmentVariableA
OpenMutexW
GetProcessHeap
GetCurrentDirectoryA
GetProcAddress
LoadLibraryA
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
DeviceIoControl
SetEndOfFile
GetLocaleInfoW
SetStdHandle
CopyFileA
MoveFileExA
DeleteFileA
CreateProcessW
GetWindowsDirectoryA
GetSystemDirectoryA
WinExec
CreateEventA
CreateProcessA
WaitForSingleObject
SetFilePointer
CloseHandle
GetModuleFileNameA
GetShortPathNameA
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
CreateFileMappingA
IsDBCSLeadByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
FlushFileBuffers
GetOEMCP
GetFileType
GetStdHandle
ExitProcess
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
QueryPerformanceCounter
GetCurrentProcessId
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
ReadFile
SetHandleCount
user32
LoadStringA
DestroyWindow
CharNextA
DefWindowProcA
advapi32
OpenSCManagerA
GetUserNameA
OpenProcessToken
RegSetKeySecurity
RegSetValueA
RegQueryValueA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
OpenServiceA
ChangeServiceConfigA
StartServiceA
QueryServiceStatus
CloseServiceHandle
CreateProcessAsUserW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegQueryInfoKeyA
ole32
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
VarUI4FromStr
setupapi
SetupIterateCabinetA
comctl32
InitCommonControlsEx
wininet
InternetConnectA
InternetReadFile
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetCrackUrlA
InternetCloseHandle
Sections
.text Size: 96KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 320KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ