Static task
static1
Behavioral task
behavioral1
Sample
f0b1dfdcf2560ec9d47af32688bd52f7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0b1dfdcf2560ec9d47af32688bd52f7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f0b1dfdcf2560ec9d47af32688bd52f7_JaffaCakes118
-
Size
156KB
-
MD5
f0b1dfdcf2560ec9d47af32688bd52f7
-
SHA1
34dd85a7b3e4326afe267b3a41bb62fe9d750491
-
SHA256
a462c2f715d8ee3912d063e1b276f273d300a6ab595c035ff6fa68a4cbb66746
-
SHA512
b72186fe5c3b00b0e7ae13511548dacb422942e3aaaf1c67abfa8d5e1597d9121b873f5bbaefbe0c95cfbf1ebe74f194a88d034721035a80f7d3383c59a80bb8
-
SSDEEP
3072:24YfGw7lFcKyhSwqVxaWtHcO7qyoj2zE6yppAMq0KKgq5C9RO:1YNlFchMwjWZ7qybkpzgq5Cn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0b1dfdcf2560ec9d47af32688bd52f7_JaffaCakes118
Files
-
f0b1dfdcf2560ec9d47af32688bd52f7_JaffaCakes118.exe windows:4 windows x86 arch:x86
2522a026c8f4ea45d7c99ca24080a771
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileMappingA
CreateFileW
CreateProcessW
DeleteCriticalSection
DeleteFileA
DisableThreadLibraryCalls
ExitProcess
ExitThread
FileTimeToLocalFileTime
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceW
FlushFileBuffers
FreeLibrary
GetACP
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStringsW
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFullPathNameA
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStdHandle
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTimeZoneInformation
GetVersion
GlobalAddAtomA
GlobalAlloc
GlobalFree
GlobalReAlloc
HeapDestroy
HeapFree
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsBadCodePtr
IsBadWritePtr
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFileTimeToFileTime
MoveFileA
ReadFile
ResetEvent
RtlUnwind
SetEnvironmentVariableA
SetFileAttributesA
SetFilePointer
SetHandleCount
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
VirtualAlloc
VirtualQuery
WriteFile
WritePrivateProfileStringA
lstrcatA
user32
CallWindowProcA
CharLowerA
ClientToScreen
CreatePopupMenu
DeleteMenu
DestroyCursor
DestroyIcon
DrawFrameControl
DrawIcon
DrawTextA
EmptyClipboard
EndDialog
EnumThreadWindows
FillRect
FindWindowA
FrameRect
GetActiveWindow
GetClassNameA
GetDCEx
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
GetParent
GetScrollInfo
GetScrollRange
GetSysColor
GetSysColorBrush
GetTopWindow
GetWindowDC
GetWindowLongA
GetWindowTextA
InsertMenuItemA
IsChild
IsDialogMessageA
IsIconic
IsRectEmpty
IsWindow
IsZoomed
LoadBitmapA
MapWindowPoints
MessageBoxA
OemToCharA
OffsetRect
OpenClipboard
PostMessageA
RedrawWindow
RegisterWindowMessageA
ReleaseDC
ScrollWindow
SetActiveWindow
SetCapture
SetClassLongA
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetPropA
SetRect
SetWindowPlacement
SetWindowPos
SetWindowsHookExA
ShowWindow
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UpdateWindow
WaitMessage
WinHelpA
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE