Static task
static1
Behavioral task
behavioral1
Sample
e1b6ae5203178b74546a1fa28c847b19_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e1b6ae5203178b74546a1fa28c847b19_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e1b6ae5203178b74546a1fa28c847b19_JaffaCakes118
-
Size
399KB
-
MD5
e1b6ae5203178b74546a1fa28c847b19
-
SHA1
b9df30bfc6da16bd016a497777d026ef6563fa7c
-
SHA256
124c6eb563d879124d72ebdfdb73b1a0acb8fec865bcf99a0f75242ca5753daf
-
SHA512
793e8734591319ecc3557d807bda510d907964451006ff19cd138881e5b0aec1e95cda0d7c1d0ed255840cc2a1e4e7016dbdd00c14a13c86b2299a3df4447a6e
-
SSDEEP
12288:DOAQPUXqU+yiWkRsuaY+RLtoTHl7lTDS3a9A:CrUXqCiWkH/+BSTBNSK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e1b6ae5203178b74546a1fa28c847b19_JaffaCakes118
Files
-
e1b6ae5203178b74546a1fa28c847b19_JaffaCakes118.exe windows:4 windows x86 arch:x86
2a54fc7f68a33deae7d6a67dd2f699fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileW
GetModuleFileNameW
GetModuleHandleW
WriteFileGather
ReadFile
AreFileApisANSI
SystemTimeToFileTime
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ReadFileEx
SetFilePointerEx
GetFileInformationByHandle
SetFileShortNameW
GetFileAttributesW
GetFullPathNameW
MapViewOfFileEx
MoveFileW
GetFileAttributesExW
UnlockFileEx
UnmapViewOfFile
GetFileSize
FindClose
CreateFileA
GetModuleFileNameA
SetFileApisToOEM
CreateHardLinkW
SearchPathW
SetEndOfFile
GetLongPathNameW
CopyFileExW
CreateIoCompletionPort
FlushViewOfFile
PostQueuedCompletionStatus
GetFileTime
OpenFileMappingW
TerminateProcess
Sleep
SetFileAttributesW
GetBinaryTypeW
FindNextFileW
LoadLibraryA
FindFirstFileW
CancelIo
GetSystemDirectoryW
GetShortPathNameW
MoveFileWithProgressW
SetFileApisToANSI
SetFileValidData
WinExec
WideCharToMultiByte
FindFirstFileExW
GetQueuedCompletionStatus
ExitProcess
DeleteFileW
SearchPathA
GetShortPathNameA
MultiByteToWideChar
GetLastError
CreateMutexW
GetModuleHandleA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCompressedFileSizeW
SetFilePointer
GetFileSizeEx
GetTickCount
WriteFileEx
CreateFileMappingW
CreateFileW
WriteFile
GetTempPathW
CloseHandle
SetFileTime
ReadFileScatter
GetTempFileNameW
FlushFileBuffers
ReplaceFileW
LockFile
GetFileType
MapViewOfFile
UnlockFile
MoveFileExW
GetProcAddress
LockFileEx
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
GetConsoleMode
GetConsoleCP
HeapSize
HeapAlloc
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
ExitThread
ResumeThread
CreateThread
GetVersionExA
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
user32
GetWindowDC
GetWindowRect
GetMessageW
TranslateMessage
DispatchMessageW
ReleaseDC
GetDesktopWindow
SetTimer
LoadCursorW
ShowWindow
UpdateWindow
GetDC
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
GetClientRect
CreateWindowExW
DrawTextW
gdi32
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
SetFileSecurityW
RegCreateKeyExW
shell32
SHGetFolderPathA
rpcrt4
UuidCreate
RpcStringFreeW
UuidToStringW
wininet
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
Sections
.text Size: 280KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ