Static task
static1
Behavioral task
behavioral1
Sample
d6e99824fe1f15f3d6503b8c9a9b92d1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d6e99824fe1f15f3d6503b8c9a9b92d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d6e99824fe1f15f3d6503b8c9a9b92d1_JaffaCakes118
-
Size
621KB
-
MD5
d6e99824fe1f15f3d6503b8c9a9b92d1
-
SHA1
e074f9d5c0d4e72ed538e1e5baae9b1fea572830
-
SHA256
270126995a62cbdd0bcbf47ce6c0e70ade96e328d3d9fb985c58383b74a1c67a
-
SHA512
c460cee074667b8c992376e03d177a8d8e567b0000c2967ba20595e1fbadacd2bc2ad9efa6f610b2797a489af66ecbda1e50bd633dfb429d3ce20bb1d7b859e8
-
SSDEEP
12288:M+v4dAWYeEGPTgLeKG0yOiWrG7GkjiLyxLoOHMqvN2a/sK6:M+A5vgfG97tj6cfHZvgqs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6e99824fe1f15f3d6503b8c9a9b92d1_JaffaCakes118
Files
-
d6e99824fe1f15f3d6503b8c9a9b92d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
125593273d5a490124d9ea3fcaf77deb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
EnumMetaFile
ChoosePixelFormat
CreateRectRgn
EndPage
GetDeviceGammaRamp
PolyBezierTo
GetWindowExtEx
SetDIBits
GetRasterizerCaps
CreateDIBPatternBrush
ScaleWindowExtEx
GetROP2
GetColorSpace
Pie
CreateScalableFontResourceA
GetICMProfileW
CopyEnhMetaFileW
GetViewportExtEx
GdiFlush
InvertRgn
comdlg32
PageSetupDlgW
shell32
ExtractIconEx
SHBrowseForFolderW
SHLoadInProc
advapi32
CryptEnumProvidersA
RegLoadKeyW
CryptGetDefaultProviderA
RegSetKeySecurity
RegOpenKeyA
CryptSetProviderW
RegDeleteKeyW
CreateServiceW
LookupPrivilegeDisplayNameW
RegEnumKeyExA
RegCreateKeyW
LookupSecurityDescriptorPartsW
RegSaveKeyA
RegConnectRegistryW
CryptDestroyHash
RegOpenKeyExW
RegNotifyChangeKeyValue
RegQueryValueExA
RegSetValueExA
RegRestoreKeyA
CryptDestroyKey
CryptGetHashParam
user32
CreateAcceleratorTableA
VkKeyScanA
EnumWindows
CheckDlgButton
GetMenuStringA
PeekMessageA
DdeSetUserHandle
OpenDesktopW
kernel32
DebugBreak
HeapFree
VirtualFree
GetSystemTimeAsFileTime
GetUserDefaultLCID
CreateEventW
GetModuleHandleA
OutputDebugStringA
WritePrivateProfileSectionW
GetTickCount
LeaveCriticalSection
EnumSystemLocalesA
SetConsoleCtrlHandler
TlsFree
MultiByteToWideChar
GetStartupInfoA
SetStdHandle
lstrlenA
GetLastError
HeapAlloc
GetConsoleOutputCP
UnhandledExceptionFilter
GetProcessHeap
GetLocaleInfoW
LoadLibraryW
OutputDebugStringW
GetACP
FreeEnvironmentStringsA
HeapValidate
GetStringTypeA
GetCurrentThreadId
GetConsoleCP
InterlockedExchange
GetCurrentProcess
GetModuleFileNameA
SetLastError
WideCharToMultiByte
GetStringTypeW
IsValidCodePage
FreeEnvironmentStringsW
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetDateFormatA
WriteConsoleA
GetConsoleMode
GetTimeZoneInformation
SetFilePointer
CompareStringA
GetCommandLineA
TerminateProcess
GetLocaleInfoA
CompareStringW
IsDebuggerPresent
CloseHandle
GetThreadLocale
WriteFile
InterlockedDecrement
VirtualAlloc
SetHandleCount
RaiseException
WriteConsoleW
GetModuleFileNameW
FlushFileBuffers
GetTimeFormatA
IsValidLocale
InterlockedIncrement
VirtualQuery
QueryPerformanceCounter
FreeLibrary
Sleep
HeapCreate
ExitProcess
CreateFileA
EnterCriticalSection
CreateSemaphoreW
GetModuleHandleW
GetCurrentThread
GetEnvironmentStrings
SetUnhandledExceptionFilter
GetFileType
GetOEMCP
TlsGetValue
RtlUnwind
HeapReAlloc
LCMapStringA
GetProcAddress
HeapDestroy
GetCurrentProcessId
HeapSize
IsBadReadPtr
GetCPInfo
LoadLibraryA
LCMapStringW
GetEnvironmentStringsW
SetEnvironmentVariableA
DeleteCriticalSection
TlsSetValue
GetStdHandle
Sections
.text Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ