Static task
static1
Behavioral task
behavioral1
Sample
f00045befb7f24a3d5f3139d0c0d9cd4_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f00045befb7f24a3d5f3139d0c0d9cd4_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f00045befb7f24a3d5f3139d0c0d9cd4_JaffaCakes118
-
Size
456KB
-
MD5
f00045befb7f24a3d5f3139d0c0d9cd4
-
SHA1
dbfad6a9f2e8e67e1fc8b600ffc822201ba0721d
-
SHA256
7b5143f8636ea89915bcf8efe353f995fb36ab97581ec42752af7c7316530fdb
-
SHA512
fbd3ddb0d57095005a23f4026dce83e3e6a2d9e9687a633e411aec8ddabe8f353d99ed896b703287068328fc0a6ab0945e39d8c535c6c5f02eaf608aaa607d76
-
SSDEEP
6144:X7mLwndO2nsRXSwg2sNPzrB70BvhQaej4keqPf0mxTgKElulAk0Ajv4PQ:X7mMw2ncSRvNft0Bp5Z08mxskAVA1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f00045befb7f24a3d5f3139d0c0d9cd4_JaffaCakes118
Files
-
f00045befb7f24a3d5f3139d0c0d9cd4_JaffaCakes118.exe windows:4 windows x86 arch:x86
1d996aa4485031c783fcbf890f8d8462
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
user32
RegisterClassA
CharPrevA
OpenIcon
OpenDesktopA
CreateWindowStationA
FrameRect
SendMessageTimeoutA
GetDlgCtrlID
RegisterClassExA
SendIMEMessageExW
shell32
ExtractAssociatedIconW
SheChangeDirA
ShellExecuteA
SHFileOperationW
comdlg32
GetFileTitleA
ChooseFontA
FindTextA
ChooseColorW
kernel32
TlsFree
EnumResourceNamesA
GetModuleFileNameA
GetTimeZoneInformation
FlushFileBuffers
HeapSize
InterlockedDecrement
GetStringTypeA
GetCurrentThread
UnhandledExceptionFilter
WriteConsoleA
SetFilePointer
VirtualProtectEx
GetUserDefaultLCID
SetHandleCount
ReadFile
HeapFree
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTempFileNameA
TlsAlloc
GetConsoleMode
VirtualFree
FindResourceExA
GetStartupInfoW
WriteConsoleW
GetCPInfo
GetThreadTimes
RtlUnwind
IsDebuggerPresent
HeapCreate
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetLocaleInfoA
InterlockedIncrement
ExitProcess
SetUnhandledExceptionFilter
GetCommandLineA
GetTimeFormatA
HeapAlloc
LocalShrink
GetCurrentThreadId
WriteFile
LoadLibraryA
FindFirstFileExA
ReadConsoleA
WaitForMultipleObjectsEx
SetEnvironmentVariableA
MultiByteToWideChar
GetOEMCP
SetStdHandle
SetConsoleCtrlHandler
CreateMutexA
GetDateFormatA
LocalAlloc
TlsSetValue
GetConsoleCP
GetCommandLineW
GetConsoleOutputCP
IsValidCodePage
GetCurrentProcessId
FindResourceA
WriteConsoleInputW
CloseHandle
GetLocaleInfoW
LCMapStringA
GetVersion
GetCalendarInfoA
CompareStringA
QueryPerformanceCounter
VirtualQuery
FreeLibrary
EnterCriticalSection
GetLastError
FindClose
TerminateProcess
OpenMutexA
LeaveCriticalSection
DeleteCriticalSection
GetACP
GetFileType
LCMapStringW
GetStringTypeW
GetSystemInfo
LoadLibraryW
GetDiskFreeSpaceA
HeapDestroy
GetFileAttributesW
UnlockFileEx
CompareStringW
GetTickCount
GetStdHandle
GetModuleFileNameW
GetProcAddress
EnumSystemLocalesA
GetCurrentProcess
TlsGetValue
GetStartupInfoA
HeapReAlloc
Sleep
GetModuleHandleW
IsValidLocale
VirtualAlloc
WideCharToMultiByte
InterlockedExchange
GetModuleHandleA
CreateFileA
SetLastError
wininet
InternetTimeFromSystemTimeA
InternetInitializeAutoProxyDll
FtpRemoveDirectoryW
InternetAttemptConnect
InternetGetCertByURL
CreateUrlCacheEntryW
HttpSendRequestW
InternetSetOptionExA
gdi32
SetPixelFormat
GetEnhMetaFileBits
GetOutlineTextMetricsA
CreateDIBSection
GetFontLanguageInfo
GetTextColor
AngleArc
SetBrushOrgEx
GetCharWidthFloatA
Pie
CloseMetaFile
TextOutW
GetColorSpace
Sections
.text Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ