Static task
static1
Behavioral task
behavioral1
Sample
e0e39b4690c04939c48cec4f6cf01ddf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0e39b4690c04939c48cec4f6cf01ddf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e0e39b4690c04939c48cec4f6cf01ddf_JaffaCakes118
-
Size
347KB
-
MD5
e0e39b4690c04939c48cec4f6cf01ddf
-
SHA1
379a972831ecba609779e7d2095aaa179c50bc7f
-
SHA256
e0b5cb4e02077fd8641bf57064361a801358b9776a6c1f3e0e6c4fb1ffbb447c
-
SHA512
5de2b8de119901d635c65ed4d968f9f1bf8cf44c2bc63664220b7c76abf4d6275a5e42ed9262ac0b9bd96ac4d03ad076ed34c73d31e3d652096c2942d9658b26
-
SSDEEP
6144:okr+bP0hOuvPQHV+4KwLivcSbwMTBdl7fAOR9nPVYZ:oTGD1wOvcSbTbl7fLY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e0e39b4690c04939c48cec4f6cf01ddf_JaffaCakes118
Files
-
e0e39b4690c04939c48cec4f6cf01ddf_JaffaCakes118.exe windows:4 windows x86 arch:x86
855fb139be0997d7c0f43d42bf3b10b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateProcessW
VirtualProtectEx
LoadLibraryA
GetProcAddress
GetFileSize
CreateFileA
GetModuleFileNameA
TerminateProcess
Sleep
GetExitCodeProcess
GetLastError
CreateProcessA
DeleteFileW
SearchPathA
GetShortPathNameA
DeleteFileA
GetSystemDirectoryW
ExitProcess
CreateMutexW
FindResourceA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
AllocateUserPhysicalPages
LoadResource
ReadFile
GetModuleHandleW
GetModuleHandleA
GetShortPathNameW
LockResource
GetTickCount
CreateFileW
CreateJobObjectW
SetEndOfFile
WriteFile
WinExec
SizeofResource
SearchPathW
GetModuleFileNameW
LoadLibraryExW
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
RaiseException
MultiByteToWideChar
HeapSize
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
HeapAlloc
HeapFree
RtlUnwind
ExitThread
ResumeThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentProcess
IsDebuggerPresent
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
GetCPInfo
GetACP
user32
DialogBoxParamW
CreateDesktopW
SetDlgItemTextA
GetWindowRect
CreateWindowExA
ShowWindow
MoveWindow
GetDC
GetWindowTextW
RegisterHotKey
LoadCursorW
RegisterClassExW
SetTimer
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
GetWindowLongW
CreateWindowExW
GetClientRect
RedrawWindow
DrawTextW
GetDesktopWindow
GetWindowDC
ReleaseDC
UpdateWindow
gdi32
SetBkMode
SetTextColor
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
GetDIBits
DeleteDC
SetDIBitsToDevice
CreateFontW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
rpcrt4
RpcStringFreeW
UuidToStringW
UuidCreate
wininet
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
Sections
.text Size: 253KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shr Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ