Static task
static1
Behavioral task
behavioral1
Sample
f66c95c8c31472cff90d3e84118cc2dd_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f66c95c8c31472cff90d3e84118cc2dd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f66c95c8c31472cff90d3e84118cc2dd_JaffaCakes118
-
Size
361KB
-
MD5
f66c95c8c31472cff90d3e84118cc2dd
-
SHA1
dc477de82f9e112540909f297c8575f066eb56d4
-
SHA256
816dcd89726fc2703f2bda72c7a8fdac45a85c4927f52b7d5175ebf05423a425
-
SHA512
18beb335ad1b82f2313e11e59bfe0cbe4ef8ffccfc19e3bcf81419c32327a53e035c973906778bfd72f5c1e5556d50c963254adb45492e3f897dd1aa118de947
-
SSDEEP
6144:LVRCC+C/1FER/kHwbYUJK/asi508ZLtMvcE9uaVuxN4YdLaBSux4W/an4Fwj0KKn:RRCC71FwsHw4d2vLtMvcE9uaVuxN4Yl/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f66c95c8c31472cff90d3e84118cc2dd_JaffaCakes118
Files
-
f66c95c8c31472cff90d3e84118cc2dd_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d02c885c46ce4af96c633ea075ccb4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
Sleep
LCMapStringA
GetProfileIntA
InitializeCriticalSection
HeapCreate
SetStdHandle
OpenMutexA
DeleteFileA
GetEnvironmentStrings
LoadLibraryA
SetHandleCount
GetStdHandle
GetDateFormatA
LeaveCriticalSection
IsValidCodePage
ReadConsoleOutputCharacterA
TerminateProcess
GetFileType
GetEnvironmentStringsW
GetLocaleInfoW
EnterCriticalSection
WriteConsoleW
GetLastError
RtlUnwind
UnhandledExceptionFilter
IsValidLocale
SetConsoleScreenBufferSize
GetProcessHeap
GetCurrentProcess
InterlockedDecrement
GetCommandLineW
TlsAlloc
TlsGetValue
CreateToolhelp32Snapshot
GlobalFindAtomA
GetCPInfo
GetConsoleOutputCP
SetConsoleTitleW
GetPrivateProfileSectionNamesW
GetOEMCP
LCMapStringW
FreeEnvironmentStringsW
HeapFree
WriteFile
SetConsoleCtrlHandler
HeapAlloc
GetSystemTimeAsFileTime
CloseHandle
TlsFree
HeapReAlloc
GetTimeFormatA
GetStartupInfoW
CreateProcessA
GetCurrentThreadId
HeapSize
GetConsoleMode
VirtualQuery
InterlockedIncrement
ExitProcess
InterlockedExchange
OpenSemaphoreW
GetLocaleInfoA
GetStartupInfoA
GetCurrentThread
DeleteCriticalSection
CreateFileA
FreeLibrary
CompareStringA
GetConsoleCP
GetCommandLineA
GetTickCount
MultiByteToWideChar
GetLocalTime
IsDebuggerPresent
AddAtomA
HeapDestroy
GetVersionExA
TlsSetValue
FreeEnvironmentStringsA
GetUserDefaultLCID
CompareStringW
CreateMailslotA
CreateMutexA
GetModuleFileNameA
GetProcAddress
GetACP
QueryPerformanceCounter
ReadFile
VirtualAlloc
SetLastError
GetPrivateProfileIntW
LocalReAlloc
GetStringTypeW
SetFilePointer
GetTimeZoneInformation
SetUnhandledExceptionFilter
GetCurrentProcessId
EnumSystemLocalesA
SetEnvironmentVariableA
FlushFileBuffers
GetModuleFileNameW
WideCharToMultiByte
VirtualFree
WriteConsoleA
GetModuleHandleA
comdlg32
GetOpenFileNameW
user32
MapVirtualKeyExA
CreateMDIWindowA
RegisterClassExA
DdeCmpStringHandles
CreateCursor
DialogBoxParamA
BroadcastSystemMessage
DrawEdge
LoadImageW
RegisterClassA
CascadeWindows
OemToCharBuffA
SetClassWord
GetKeyState
KillTimer
SetDlgItemInt
OemToCharW
EnumWindowStationsW
GetUpdateRgn
DdeConnectList
AdjustWindowRect
MessageBoxIndirectA
GetMenuItemInfoW
InvalidateRect
GetKeyboardLayoutList
DestroyWindow
gdi32
CreateICA
GetEnhMetaFilePaletteEntries
SetPixelFormat
ExtFloodFill
ArcTo
GetDIBits
SetMiterLimit
DPtoLP
GetTextColor
GetCharacterPlacementW
GetCurrentPositionEx
SetTextJustification
CreatePen
CreateDIBitmap
DeleteObject
EqualRgn
AngleArc
UpdateICMRegKeyW
CopyMetaFileA
GetStretchBltMode
AbortDoc
StretchDIBits
GetEnhMetaFileHeader
comctl32
InitCommonControlsEx
shell32
ExtractAssociatedIconExA
SHGetInstanceExplorer
InternalExtractIconListA
FreeIconList
advapi32
RegQueryMultipleValuesA
RegCreateKeyA
LogonUserW
StartServiceW
CryptSetHashParam
CryptSetProviderW
RegOpenKeyA
RegEnumValueW
Sections
.text Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ