Static task
static1
Behavioral task
behavioral1
Sample
d9a902bdbd752a7aa1520d0b5a1dc819_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d9a902bdbd752a7aa1520d0b5a1dc819_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d9a902bdbd752a7aa1520d0b5a1dc819_JaffaCakes118
-
Size
72KB
-
MD5
d9a902bdbd752a7aa1520d0b5a1dc819
-
SHA1
2d6b1ecd957bb4b508e965f6b316355b42f3fdc2
-
SHA256
40a25ed2f596cc514e11b0bc492e2ac26041fd685d8abbf369d733e6287cdf82
-
SHA512
43f2ca24268703c83a5d34b00d151998cb90b88d99b2a51f36e62b17b5051d7b0f66c77a42db85b28ea9639a377672f2b73bb7a150dce34f31ea19a2938ddc49
-
SSDEEP
768:U5u7G/WR3X88PPHRoRg/UJXs5pOOSJNTQ+FT6klsc+jqVqno64:m+xs8hokUaX+NTx7sPjPo64
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9a902bdbd752a7aa1520d0b5a1dc819_JaffaCakes118
Files
-
d9a902bdbd752a7aa1520d0b5a1dc819_JaffaCakes118.exe windows:4 windows x86 arch:x86
009b742a8799d9294c9f18ee841aa9db
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
InterlockedIncrement
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetFileType
GetStdHandle
GetTempPathA
InterlockedDecrement
GetTempFileNameA
DeleteFileA
Sleep
WinExec
GetVersionExA
CreateFileA
LCMapStringA
DeviceIoControl
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
GetLastError
WideCharToMultiByte
LocalFree
RtlUnwind
HeapFree
HeapAlloc
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
user32
GetPropA
ShowWindow
DestroyWindow
DefWindowProcA
BeginPaint
DrawTextA
EndPaint
PostQuitMessage
CreateWindowExA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetDlgItem
SetPropA
GetClientRect
MoveWindow
SetForegroundWindow
EndDialog
MessageBoxA
EnableWindow
SendMessageA
DialogBoxParamA
gdi32
GetStockObject
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantClear
SysFreeString
SysAllocString
urlmon
URLDownloadToFileA
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ