Static task
static1
Behavioral task
behavioral1
Sample
ef7acc28e666b89ff6f1f8a6f7c90d05_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ef7acc28e666b89ff6f1f8a6f7c90d05_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef7acc28e666b89ff6f1f8a6f7c90d05_JaffaCakes118
-
Size
793KB
-
MD5
ef7acc28e666b89ff6f1f8a6f7c90d05
-
SHA1
ce05982487c824ca7ca0add73ab6de43d416e12b
-
SHA256
f3226af68f961cb2e6ed1cbab19b7fac05f8e5195fda9482fac15f1971d36d14
-
SHA512
42deb79ce205f25c54c240de418ee90a5ae8695250a1ba2a64f4a94c4f541495ac461ada4299d543c07ed2049cd8c462a92d92feb74419cfc699297ed4bb56c5
-
SSDEEP
12288:wY+L1YTsqZuTgk+zLqxXCjIPw0O3/apt0cngg7nK5qFQsHiQhRCRleUX:Te1YTGO21Y0w/appn3diPX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef7acc28e666b89ff6f1f8a6f7c90d05_JaffaCakes118
Files
-
ef7acc28e666b89ff6f1f8a6f7c90d05_JaffaCakes118.exe windows:4 windows x86 arch:x86
80dd20780b18bd2186e8970ed5354eac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
wininet
InternetQueryDataAvailable
SetUrlCacheEntryGroupA
FindNextUrlCacheEntryExW
DeleteUrlCacheEntry
FreeUrlCacheSpaceA
shell32
SHAddToRecentDocs
SHEmptyRecycleBinA
ShellExecuteEx
kernel32
GetLocaleInfoA
GetCommandLineA
GetUserDefaultLCID
TlsFree
MultiByteToWideChar
EnterCriticalSection
GetStdHandle
IsDebuggerPresent
WideCharToMultiByte
WriteProfileStringA
CompareFileTime
WriteConsoleW
LoadLibraryA
InterlockedDecrement
GetFileType
HeapCreate
HeapValidate
SleepEx
GetSystemTimeAsFileTime
SetLastError
AddAtomW
RaiseException
GetCPInfo
GetCurrentThreadId
GetDateFormatA
WriteFile
TlsSetValue
GetConsoleOutputCP
HeapDestroy
HeapReAlloc
Sleep
QueryPerformanceCounter
GetVersionExW
GetCommandLineW
GetCurrentProcess
GetNamedPipeHandleStateA
OpenMutexA
EnumSystemLocalesA
GetEnvironmentVariableW
GetEnvironmentStringsW
IsBadReadPtr
GetLastError
GetModuleFileNameA
InterlockedExchange
VirtualQuery
GetOEMCP
CompareStringW
HeapFree
OutputDebugStringA
GetConsoleCP
FlushFileBuffers
InterlockedIncrement
HeapSize
LoadLibraryW
OpenMutexW
GetLocaleInfoW
GetStringTypeA
GetModuleHandleA
GetProcessHeap
ExitProcess
CloseHandle
EnumDateFormatsW
HeapAlloc
SetEnvironmentVariableA
FoldStringA
SetHandleCount
GetCurrentThread
DebugBreak
GetProcAddress
TerminateProcess
CreateMutexA
lstrlenA
CreateFileA
TlsGetValue
ContinueDebugEvent
GetModuleHandleW
FreeLibrary
FindNextFileW
GetConsoleTitleW
GetStartupInfoA
SetUnhandledExceptionFilter
ExpandEnvironmentStringsW
GetConsoleMode
SetConsoleCtrlHandler
GetModuleFileNameW
DeleteCriticalSection
GetTimeFormatA
GetDiskFreeSpaceExA
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
LCMapStringA
GetStringTypeW
LCMapStringW
VirtualAlloc
SetStdHandle
UnmapViewOfFile
ReadFile
LeaveCriticalSection
RtlUnwind
CompareStringA
GetStartupInfoW
OutputDebugStringW
FreeEnvironmentStringsW
GetACP
TlsAlloc
GetCurrentProcessId
SetFilePointer
SetCurrentDirectoryA
IsValidLocale
GetTickCount
GetTimeZoneInformation
WriteConsoleA
IsValidCodePage
VirtualFree
comdlg32
FindTextA
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
user32
RegisterClassA
CopyAcceleratorTableA
SendIMEMessageExA
RegisterClassExA
EnumDisplaySettingsExA
GetKeyState
ReplyMessage
CheckMenuItem
DlgDirListA
Sections
.text Size: 417KB - Virtual size: 416KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ