Static task
static1
Behavioral task
behavioral1
Sample
db58eede40a2784989a03ca4ba9eb431_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db58eede40a2784989a03ca4ba9eb431_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db58eede40a2784989a03ca4ba9eb431_JaffaCakes118
-
Size
863KB
-
MD5
db58eede40a2784989a03ca4ba9eb431
-
SHA1
4730f93fc829927b86493283d803ed0c174ab6d3
-
SHA256
aeb191c7f2e340ea4c779d033f19bc31c30508e56dfdd205b386d2cbab61ceef
-
SHA512
38e16dbf204d88f07dd865d119c779bf9dd040886ab32761042a256e0f5af36beaad940cb7f6353e101b3bd328867b94981ef2a6a16b95c686faf3b4181cb6c0
-
SSDEEP
12288:gKxY/y2I0S64ygTuYLJyqhdzan9Aucj6TSkiys:gKxY/hLBgy2denauczki
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db58eede40a2784989a03ca4ba9eb431_JaffaCakes118
Files
-
db58eede40a2784989a03ca4ba9eb431_JaffaCakes118.exe windows:5 windows x86 arch:x86
0d49744b60829ca6e114ef21f84f12c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
LocalFree
MultiByteToWideChar
RtlUnwind
GetSystemDirectoryW
SetFilePointer
SetHandleCount
SetStdHandle
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
GetStdHandle
GetStartupInfoW
GetProcAddress
GetModuleFileNameW
GetModuleFileNameA
GetFileType
GetExitCodeProcess
GetEnvironmentStringsW
GetEnvironmentStrings
GetCurrentProcess
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushInstructionCache
FlushFileBuffers
ExitProcess
DeleteCriticalSection
CreateThread
CreateProcessW
CreateEventW
CloseHandle
GetStartupInfoA
lstrlenA
GetCommandLineA
GetLastError
GetModuleHandleA
GetFileAttributesW
GetTickCount
GetVersion
HeapAlloc
VirtualAllocEx
GetProcessHeap
GetCurrentThreadId
GetCommandLineW
GlobalAlloc
LoadLibraryW
lstrlenW
GetDriveTypeA
GetCurrentProcessId
Sleep
GetFileAttributesA
GetDriveTypeW
LoadLibraryA
SetEvent
GetModuleHandleW
user32
TranslateMessage
UnregisterClassW
SetWindowLongW
SetThreadDesktop
SetProcessWindowStation
SetForegroundWindow
SetDlgItemTextW
RegisterClassW
PostThreadMessageW
PostQuitMessage
PostMessageW
PeekMessageW
OpenWindowStationW
OpenDesktopW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetWindowTextW
GetUserObjectInformationW
GetThreadDesktop
GetProcessWindowStation
GetMessageW
GetDesktopWindow
EnumThreadWindows
DispatchMessageW
DefWindowProcW
CreateWindowExW
CharNextW
LoadIconW
GetSystemMetrics
ShowWindow
LoadBitmapW
GetParent
LoadBitmapA
IsDlgButtonChecked
DestroyWindow
UpdateWindow
GetDlgItem
SendMessageA
IsWindowVisible
DestroyIcon
GetKeyState
LoadIconA
GetMenu
EnableMenuItem
IsWindow
GetDC
SendMessageW
GetSysColor
gdi32
CreateMetaFileW
GetEnhMetaFileW
DeleteEnhMetaFile
CreateCompatibleDC
AddFontResourceW
CreatePatternBrush
GetGraphicsMode
DeleteObject
DeleteMetaFile
BeginPath
GdiFlush
CreateHalftonePalette
CloseFigure
EndDoc
FlattenPath
GdiGetBatchLimit
GetColorSpace
AbortPath
GetBkColor
SetTextColor
SelectObject
EndPage
AbortDoc
GetFontLanguageInfo
DeleteDC
CancelDC
GetDCPenColor
AddFontResourceA
SaveDC
EndPath
CloseMetaFile
CreateMetaFileA
SetBkMode
GetDCBrushColor
DeleteColorSpace
CreateSolidBrush
CloseEnhMetaFile
GetEnhMetaFileA
GetBkMode
SetTextAlign
GetLayout
advapi32
RegQueryValueExA
RegOpenKeyA
shell32
Shell_NotifyIconW
ole32
CoSuspendClassObjects
CoUninitialize
CoResumeClassObjects
CoInitializeSecurity
CoInitializeEx
winmm
timeGetTime
Sections
.text Size: 806KB - Virtual size: 806KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ