Static task
static1
Behavioral task
behavioral1
Sample
f4e19f4b9a68fe3ab83106d4dfcc37a3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f4e19f4b9a68fe3ab83106d4dfcc37a3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4e19f4b9a68fe3ab83106d4dfcc37a3_JaffaCakes118
-
Size
580KB
-
MD5
f4e19f4b9a68fe3ab83106d4dfcc37a3
-
SHA1
5af0c99a75d1c3c505d38e13f5b774772fa9f67b
-
SHA256
7fdf9387c6d18dd05979359f2114763dce0e45c964dc90a7204a173cda30caa7
-
SHA512
3c4407ee73ce502dca6edc09a8e5c4364c6ff1ed6f551174e546b68cd66e3750ee4968124c8df5d01cf30b27abbf5361fe26c125f78239d935d90f6a1c11a1f9
-
SSDEEP
12288:l6kFXxpfms0o6zcW7aRJNshvQTJYRYfrXM:lZ/mjbOUvQsgrXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4e19f4b9a68fe3ab83106d4dfcc37a3_JaffaCakes118
Files
-
f4e19f4b9a68fe3ab83106d4dfcc37a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
3c1e3c515578f0a377688507f1624bdb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
GetTimeZoneInformation
GetUserDefaultLCID
GetProcAddress
VirtualLock
WritePrivateProfileStructW
GetShortPathNameA
LeaveCriticalSection
TlsFree
GetDateFormatW
SetUnhandledExceptionFilter
OpenMutexA
IsDebuggerPresent
GetCurrentProcess
InterlockedIncrement
SetLastError
EnumResourceTypesW
GetCommandLineA
GetCompressedFileSizeA
GetUserDefaultLangID
OpenWaitableTimerW
GetSystemTimeAsFileTime
GetNamedPipeHandleStateW
GetPrivateProfileSectionW
TlsSetValue
GetModuleHandleA
GetStdHandle
CreateWaitableTimerW
IsValidCodePage
GetDiskFreeSpaceExW
WriteProfileStringA
VirtualAlloc
GetTimeFormatA
EnumDateFormatsExA
GetDiskFreeSpaceExA
SystemTimeToFileTime
ReadConsoleOutputCharacterA
EnumSystemLocalesA
IsValidLocale
HeapSize
SetEnvironmentVariableA
WideCharToMultiByte
VirtualQuery
HeapReAlloc
ContinueDebugEvent
SetThreadPriority
CloseHandle
GetProcessHeap
GetModuleFileNameA
GetConsoleCP
ReadConsoleA
GetCurrentThreadId
SetConsoleOutputCP
GlobalGetAtomNameA
GetLocaleInfoW
FreeLibrary
GetNumberFormatW
CompareStringW
CompareStringA
ResumeThread
HeapFree
GetLongPathNameA
GetFileType
WriteConsoleA
HeapValidate
GetProfileStringA
RtlUnwind
FreeEnvironmentStringsW
LocalFlags
LocalUnlock
GetStartupInfoA
GetOEMCP
GetTickCount
GetDiskFreeSpaceW
lstrcmpW
GetCurrentProcessId
CreateMutexA
FlushFileBuffers
WriteConsoleOutputA
GetCPInfo
TlsAlloc
QueryPerformanceCounter
FileTimeToSystemTime
GetDateFormatA
InitializeCriticalSection
GetLocaleInfoA
GetConsoleMode
CreateFileA
CreateWaitableTimerA
FindResourceA
Sleep
FlushInstructionCache
lstrcpy
SleepEx
GetEnvironmentStrings
TlsGetValue
ReadFile
MultiByteToWideChar
GetConsoleOutputCP
CopyFileExA
LoadLibraryA
UnhandledExceptionFilter
GetProcessShutdownParameters
EnterCriticalSection
CopyFileA
LCMapStringA
VirtualFree
FindClose
TerminateProcess
UnlockFileEx
DeleteCriticalSection
HeapAlloc
WriteConsoleW
GetStringTypeA
SetConsoleCP
InterlockedExchange
GetAtomNameA
SetCurrentDirectoryW
SetHandleCount
LocalReAlloc
OpenFile
GlobalCompact
SetConsoleCtrlHandler
DeleteFiber
GetLastError
LCMapStringW
GlobalFree
AddAtomA
ExitProcess
FormatMessageW
GetStringTypeW
GetACP
GetVersionExA
WriteFile
HeapDestroy
MoveFileA
GetEnvironmentStringsW
GetCurrentThread
GetThreadTimes
InterlockedDecrement
LoadLibraryW
FreeEnvironmentStringsA
MapViewOfFile
HeapCreate
SetFilePointer
GetEnvironmentVariableW
comdlg32
PageSetupDlgA
PrintDlgW
FindTextA
FindTextW
user32
DragDetect
GetClassWord
OpenWindowStationW
LoadKeyboardLayoutW
GetListBoxInfo
GetMonitorInfoW
GetKeyboardType
DrawEdge
DlgDirSelectComboBoxExA
GetTabbedTextExtentA
CreateWindowExW
DdeSetUserHandle
wvsprintfA
CheckMenuRadioItem
MessageBoxA
DestroyWindow
GetProcessWindowStation
SetWindowTextA
SetProcessWindowStation
LoadMenuA
DefWindowProcA
SetWindowsHookW
CharPrevW
RegisterClassW
GetKeyboardState
GetWindowTextA
ShowWindow
FindWindowA
DdeQueryConvInfo
RegisterClassExA
CreateWindowStationW
InvalidateRect
WindowFromPoint
DdeNameService
DdeAbandonTransaction
RedrawWindow
EnumDesktopsA
DdeConnect
SendNotifyMessageA
WinHelpW
LoadCursorFromFileA
GetKeyboardLayoutList
IsRectEmpty
GetScrollPos
SetUserObjectInformationW
IsCharUpperA
GetAncestor
PaintDesktop
SetDlgItemTextW
EnumDesktopWindows
GrayStringW
RegisterClassA
DeleteMenu
CreateMenu
comctl32
ImageList_SetImageCount
ImageList_SetFlags
DrawInsert
ImageList_SetIconSize
InitCommonControlsEx
ImageList_SetDragCursorImage
ImageList_GetImageRect
ImageList_GetIconSize
ImageList_Draw
ImageList_Remove
ImageList_Write
CreateMappedBitmap
Sections
.text Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ