Static task
static1
Behavioral task
behavioral1
Sample
db885e6a5034705e47660857f01dc6cb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db885e6a5034705e47660857f01dc6cb_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
db885e6a5034705e47660857f01dc6cb_JaffaCakes118
-
Size
632KB
-
MD5
db885e6a5034705e47660857f01dc6cb
-
SHA1
9247d51b80dc9d3eba80d76aeec072121c3a094e
-
SHA256
a4ad19af424ced5c4a9f656a2bcc9af489b03bcdb94a515c8c82048c37aeca8a
-
SHA512
41c13f4170a92f86b27e4ec2eed0b3df0295c2fceb69e86d4c65b14103d9d73dda50a7a760a7a39823b345aca42f088b6aee49456e3e9af79f31230167100154
-
SSDEEP
12288:QKIcHsh9Mw7qYCE9KMz43DJ+5SwDw80JJB2sSPAvLymbS:QlcHshV7qY14t+ZiLUnEymbS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db885e6a5034705e47660857f01dc6cb_JaffaCakes118
Files
-
db885e6a5034705e47660857f01dc6cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
a5fe81385ceb038022423072919e0570
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GetCurrentThread
MultiByteToWideChar
ReadConsoleInputA
GetUserDefaultLCID
IsValidCodePage
GetStringTypeA
GetStringTypeW
VirtualQuery
EnumSystemLocalesA
FindResourceExW
GetStartupInfoW
GetStdHandle
CloseHandle
QueryPerformanceCounter
SetConsoleCtrlHandler
GetEnvironmentStringsW
SetStdHandle
SetUnhandledExceptionFilter
GetOEMCP
MoveFileExW
FreeLibrary
InterlockedDecrement
WriteFile
FlushFileBuffers
GetCurrentProcess
LoadLibraryExW
GetPrivateProfileStructW
lstrcpynA
GetPrivateProfileIntW
lstrlenW
DeleteCriticalSection
SetThreadAffinityMask
WriteConsoleW
SetLastError
CreateProcessA
ExitProcess
LeaveCriticalSection
VirtualAlloc
WritePrivateProfileStringW
WideCharToMultiByte
WaitForMultipleObjects
SetConsoleMode
SetHandleCount
InterlockedExchange
GetCommandLineW
GetEnvironmentStrings
LoadResource
SetThreadPriority
VirtualLock
EnumDateFormatsA
EnumResourceNamesA
HeapReAlloc
FreeEnvironmentStringsW
GetLogicalDriveStringsA
GetLastError
GetTimeZoneInformation
GetVersionExA
GetConsoleOutputCP
GetCPInfo
CreateFileW
GetModuleHandleA
GetDateFormatA
GetConsoleScreenBufferInfo
lstrcmpiA
GetFileType
InitializeCriticalSection
GetTimeFormatA
LCMapStringA
TlsAlloc
IsDebuggerPresent
SetEnvironmentVariableA
GetConsoleMode
SetEvent
Sleep
OutputDebugStringA
GetProcAddress
GetSystemTime
GetThreadSelectorEntry
WriteConsoleOutputCharacterA
FindClose
VirtualFree
MoveFileW
TerminateProcess
HeapDestroy
GetDiskFreeSpaceExW
GlobalGetAtomNameA
WriteConsoleA
GlobalReAlloc
SetPriorityClass
CreateFileMappingW
GetProcAddress
lstrcpyn
CreateMutexA
CreatePipe
LoadLibraryA
SuspendThread
GetProcessAffinityMask
GetProcessHeap
GlobalHandle
GetCurrentDirectoryA
GetConsoleCP
GetACP
GetTickCount
TlsSetValue
OpenEventW
CommConfigDialogW
RtlUnwind
SetConsoleCursorInfo
HeapSize
FormatMessageW
GetModuleFileNameA
FreeEnvironmentStringsA
GetDriveTypeA
GetSystemTimeAsFileTime
GetLocaleInfoW
EnterCriticalSection
LocalFileTimeToFileTime
GetVersion
DeleteAtom
RaiseException
GetSystemInfo
GetCommandLineA
IsValidLocale
WaitNamedPipeA
CreateEventA
VirtualProtect
HeapFree
HeapAlloc
CompareStringW
GetStartupInfoA
GetCurrentThreadId
CompareStringA
InterlockedIncrement
UnhandledExceptionFilter
SetFileTime
OpenMutexA
FoldStringA
FindFirstFileA
GetModuleFileNameW
GetCurrentProcessId
ReadFile
CreateFileA
SetFilePointer
lstrcatA
ReadConsoleOutputCharacterA
TlsGetValue
LCMapStringW
HeapCreate
TlsFree
comctl32
InitCommonControlsEx
ImageList_SetDragCursorImage
CreateMappedBitmap
DrawStatusTextW
ImageList_DragEnter
MakeDragList
ImageList_GetDragImage
_TrackMouseEvent
CreatePropertySheetPageA
ImageList_DragLeave
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_Write
ImageList_Read
ImageList_SetIconSize
ImageList_Create
ImageList_Copy
ImageList_Draw
ImageList_SetFilter
ImageList_GetBkColor
shell32
DoEnvironmentSubstA
ExtractAssociatedIconW
DragQueryFile
ExtractIconExW
user32
CheckMenuRadioItem
RegisterClassA
GetWindowModuleFileNameA
OpenWindowStationA
DefWindowProcW
CreateWindowExW
CharToOemBuffW
DdeKeepStringHandle
EnumPropsW
DrawFrameControl
CreateAcceleratorTableA
IsCharAlphaA
GetTabbedTextExtentW
SetRect
RegisterWindowMessageW
UnregisterClassA
DrawFocusRect
RegisterClassExA
SystemParametersInfoW
UpdateWindow
GetDlgItemInt
DestroyWindow
UnloadKeyboardLayout
GetDlgItemTextW
WinHelpW
GetKeyNameTextW
GetScrollPos
GetMessageExtraInfo
GetInputState
DeferWindowPos
DdeQueryStringA
CreateDialogIndirectParamW
DrawTextW
CreateIconFromResourceEx
RegisterClassW
AttachThreadInput
CascadeChildWindows
GetForegroundWindow
ShowWindow
SetMenuItemBitmaps
EnumWindows
SetScrollRange
MessageBoxW
OemKeyScan
SetMessageExtraInfo
GetCursorPos
RedrawWindow
IsClipboardFormatAvailable
IsCharAlphaW
DrawTextExA
GetMonitorInfoA
SetWindowRgn
TabbedTextOutA
SetWindowsHookExA
ToAscii
TrackPopupMenu
SendDlgItemMessageA
InsertMenuA
advapi32
RegSetKeySecurity
CryptSetKeyParam
CryptAcquireContextA
RevertToSelf
CryptSetProviderA
LookupPrivilegeDisplayNameW
CryptEnumProvidersA
CryptGetHashParam
CreateServiceW
CryptGetKeyParam
LogonUserA
LogonUserW
RegQueryInfoKeyA
LookupAccountSidA
DuplicateToken
gdi32
GetEnhMetaFileDescriptionA
GetCharWidth32A
GetCharABCWidthsFloatW
GetCharABCWidthsFloatA
SetWinMetaFileBits
UpdateICMRegKeyW
CreateDCW
comdlg32
GetOpenFileNameA
ChooseFontW
Sections
.text Size: 228KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 266KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ