Static task
static1
Behavioral task
behavioral1
Sample
efdc1bbee4fb0e45fc65afb289ed1522_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efdc1bbee4fb0e45fc65afb289ed1522_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
efdc1bbee4fb0e45fc65afb289ed1522_JaffaCakes118
-
Size
513KB
-
MD5
efdc1bbee4fb0e45fc65afb289ed1522
-
SHA1
9a7bae6c45932aed00e6bf4cd5a2744e844746b7
-
SHA256
44ac42fbd8c3a22123c98ed9a25214032b9f7bdef9635e8444039567a1172fed
-
SHA512
04864b01f0cf7fe0b8c1e849da81313bddcdefd848a319d4929bc6b5b024dd2c58228130ba1e4c2dff38952e1ba4be11c66b387710b13a5eb0151ac6f6855274
-
SSDEEP
12288:vEsUMGSatBLU+2jLeLqZTVdCqvJ1OexfUI0l+TWH:cn1SatBLU+yeLoz3vJ5hpx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efdc1bbee4fb0e45fc65afb289ed1522_JaffaCakes118
Files
-
efdc1bbee4fb0e45fc65afb289ed1522_JaffaCakes118.exe windows:4 windows x86 arch:x86
bed677d0723bfe12f1e22d81a77317f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorW
PageSetupDlgW
user32
LoadCursorW
DefFrameProcA
SetMessageExtraInfo
PostThreadMessageW
RegisterClassExA
CopyAcceleratorTableW
RegisterClassA
BeginDeferWindowPos
shell32
CheckEscapesW
SHGetFileInfo
ShellExecuteA
SHQueryRecycleBinA
CommandLineToArgvW
kernel32
WritePrivateProfileStringA
RtlUnwind
GetEnvironmentStringsW
WriteConsoleW
GetCurrentProcessId
GetTimeFormatA
ExitProcess
SetStdHandle
GetCurrentThread
IsValidCodePage
TlsSetValue
MultiByteToWideChar
QueryPerformanceCounter
GetCPInfo
TerminateProcess
LoadLibraryA
DeleteCriticalSection
GetFileType
LocalLock
GetTimeZoneInformation
SetConsoleCursorPosition
CreateFileA
InterlockedExchange
GetConsoleOutputCP
InterlockedDecrement
GetEnvironmentStrings
WritePrivateProfileSectionA
CompareStringW
ReadFile
TlsAlloc
GetConsoleCP
LoadResource
SetEnvironmentVariableA
SetHandleCount
TlsGetValue
SetConsoleCtrlHandler
EnterCriticalSection
GetCommandLineA
HeapDestroy
InitializeCriticalSection
IsValidLocale
VirtualFree
InterlockedIncrement
GetDateFormatA
EnumResourceNamesA
GetProcessHeap
GetStdHandle
EnumResourceNamesW
WideCharToMultiByte
GetCurrentThreadId
GetSystemTimeAsFileTime
OpenMutexA
LockFileEx
CreateDirectoryExW
SetLastError
GetCurrentProcess
SetUnhandledExceptionFilter
Sleep
GetACP
CreateMutexA
IsDebuggerPresent
FoldStringW
FreeLibrary
LeaveCriticalSection
TlsFree
FreeEnvironmentStringsA
CompareStringA
VirtualAlloc
GetModuleHandleA
CloseHandle
SetThreadLocale
GetProcAddress
GetModuleFileNameA
GetUserDefaultLCID
ReadConsoleW
EnumCalendarInfoW
GetOEMCP
LCMapStringA
EnumSystemLocalesA
UnhandledExceptionFilter
GetSystemDirectoryA
HeapFree
FlushFileBuffers
FreeEnvironmentStringsW
DeleteFileA
WriteFile
GetStringTypeW
GetStartupInfoA
GetLocaleInfoW
GetLastError
HeapSize
VirtualQuery
GetTickCount
LCMapStringW
GetStringTypeA
HeapCreate
HeapReAlloc
SetCurrentDirectoryA
SetFilePointer
GetLocaleInfoA
GetProfileSectionW
GetConsoleMode
HeapAlloc
WriteConsoleA
GetVersionExA
advapi32
LookupPrivilegeDisplayNameA
DuplicateToken
RegEnumValueW
RegEnumValueA
CryptDuplicateKey
RegQueryValueW
ReportEventW
comctl32
InitCommonControlsEx
gdi32
GetCharWidthFloatA
GetMetaFileBitsEx
PolylineTo
GetGraphicsMode
RoundRect
PlayMetaFileRecord
PolyTextOutW
EnumFontFamiliesW
CreateCompatibleBitmap
CreatePalette
EnumFontFamiliesA
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ