Static task
static1
Behavioral task
behavioral1
Sample
ed91f020ac4d921f4fd9ad1ea903b75f_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
ed91f020ac4d921f4fd9ad1ea903b75f_JaffaCakes118
-
Size
323KB
-
MD5
ed91f020ac4d921f4fd9ad1ea903b75f
-
SHA1
6236074bd2fbf7f59105796521386cd6b4d20629
-
SHA256
2d3339830687dfa3a6a80d125acd4a81190e1775f5a54b2dd36125844e3e19f0
-
SHA512
c6cb4f4391e410e9eaeb2ffd6db75b13b2307dbaafd49b12810daa3da30fd24d4f62c7851b8bc21898a67a6379dc033277bd392136b203c04fd205473e32279a
-
SSDEEP
6144:ivGO3yl828vcPv2yv8vrvvvLvvvLvvvrvvvLvvvrvjvrvTPnbH7fvTv1KQOOU0qy:G1y6KJ05
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed91f020ac4d921f4fd9ad1ea903b75f_JaffaCakes118
Files
-
ed91f020ac4d921f4fd9ad1ea903b75f_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec65080a0175f0905e863aaa1aee6c93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
RtlUnwind
HeapReAlloc
SetStdHandle
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
GetFullPathNameW
CreateDirectoryW
GetConsoleMode
GetConsoleCP
GetFileType
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetTimeZoneInformation
HeapCreate
FindResourceA
lstrcmpA
lstrlenA
FreeLibrary
LoadResource
SystemTimeToTzSpecificLocalTime
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
GetCommandLineA
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
SizeofResource
CreateEventA
SetDllDirectoryA
IsDBCSLeadByte
lstrcatA
MultiByteToWideChar
lstrlenW
RaiseException
GetLastError
lstrcmpiA
GetProcAddress
WaitForMultipleObjects
GetModuleFileNameA
LoadLibraryExA
CreateMutexA
DeleteCriticalSection
CloseHandle
SetEvent
ResetEvent
CreateThread
lstrcpyA
lstrcpynA
CreateFileA
WriteFile
Sleep
ReadFile
OpenEventA
GetCurrentProcess
GetTickCount
GetVersionExA
GetCurrentProcessId
GetTempPathA
LocalFree
DeleteFileA
FileTimeToSystemTime
FormatMessageW
GetLocalTime
GetCurrentThreadId
PeekNamedPipe
SetHandleInformation
GetExitCodeProcess
CreateProcessA
TerminateProcess
GetUserDefaultUILanguage
GetFileAttributesA
GetStdHandle
LoadLibraryExW
GetModuleHandleExA
GetModuleHandleExW
LoadLibraryW
CreateFileW
SetFilePointerEx
InitializeCriticalSection
ClearCommBreak
WriteProfileStringA
LocalShrink
FillConsoleOutputCharacterA
RemoveDirectoryA
GetComputerNameExA
WaitForSingleObjectEx
FindFirstChangeNotificationA
SetCriticalSectionSpinCount
SetCommMask
AllocConsole
GetComputerNameW
HeapDestroy
AssignProcessToJobObject
SetCommTimeouts
UnregisterWaitEx
lstrcpynW
SetCurrentDirectoryA
SetConsoleCP
GetOverlappedResult
GetLogicalDriveStringsA
GetFileTime
GetPrivateProfileStringW
GetVolumeNameForVolumeMountPointA
FormatMessageA
LocalAlloc
FindClose
FindFirstFileW
FindNextFileW
GetVersion
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetACP
GetOEMCP
SetHandleCount
GetStartupInfoA
VirtualFree
LCMapStringA
GetStringTypeA
LoadLibraryA
FlushFileBuffers
SetFilePointer
GetModuleHandleA
SetErrorMode
user32
LoadCursorFromFileW
AppendMenuW
LockWindowUpdate
GetSysColor
SendMessageCallbackA
InsertMenuItemA
GetKeyboardType
DdeInitializeA
OpenDesktopA
CreateWindowStationA
GetDC
LoadCursorW
LoadIconA
LoadCursorA
GetLastActivePopup
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
gdi32
GetStockObject
CreateHatchBrush
ExtTextOutW
RemoveFontResourceTracking
GetStretchBltMode
GetKerningPairs
SelectClipRgn
SetDIBColorTable
Ellipse
PaintRgn
SaveDC
GetColorSpace
comdlg32
GetSaveFileNameW
advapi32
FreeSid
RegOpenKeyW
GetUserNameA
RegQueryValueExA
shell32
Shell_NotifyIconA
SHGetFolderPathW
ShellExecuteA
ShellHookProc
ExtractAssociatedIconA
SHAppBarMessage
SHGetFolderLocation
SHBindToParent
DragFinish
DragQueryFileAorW
ExtractAssociatedIconExW
ShellExecuteExW
Shell_NotifyIconW
SHGetFileInfoA
ExtractIconExA
SHBrowseForFolderA
ole32
OleCreate
shlwapi
StrRChrW
StrCmpNA
StrRStrIA
winmm
PlaySoundA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ