Static task
static1
Behavioral task
behavioral1
Sample
f6be1a31e603e1527d2348787ffebbeb_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
f6be1a31e603e1527d2348787ffebbeb_JaffaCakes118
-
Size
323KB
-
MD5
f6be1a31e603e1527d2348787ffebbeb
-
SHA1
93d380d22a7faabdde8d96c02280d462aa86df66
-
SHA256
454522f207d5d83a4fb9f1ae40968cf1715ccdf3f59646da4ce4eb05d5f16262
-
SHA512
25442f531b0ecaeef05d14f83480b4071d34133cf2961337abbef0aa91cc760a6a1cf22a75480769eae3af9a58c247f8db49dd4bef830ab11ccf97514fd2d670
-
SSDEEP
6144:evGO3yl828vcPv2yv8vrvvvLvvvLvvvrvvvLvvvrvjvrvTPnbH7fvTv1KUOOU0qy:a1y6K105
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6be1a31e603e1527d2348787ffebbeb_JaffaCakes118
Files
-
f6be1a31e603e1527d2348787ffebbeb_JaffaCakes118.exe windows:4 windows x86 arch:x86
ec65080a0175f0905e863aaa1aee6c93
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
RtlUnwind
HeapReAlloc
SetStdHandle
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
GetFullPathNameW
CreateDirectoryW
GetConsoleMode
GetConsoleCP
GetFileType
GetStartupInfoW
HeapSetInformation
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
GetModuleHandleW
VirtualAlloc
VirtualProtect
HeapAlloc
HeapFree
DecodePointer
EncodePointer
GetStringTypeW
InterlockedExchange
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetTimeZoneInformation
HeapCreate
FindResourceA
lstrcmpA
lstrlenA
FreeLibrary
LoadResource
SystemTimeToTzSpecificLocalTime
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
GetCommandLineA
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
SizeofResource
CreateEventA
SetDllDirectoryA
IsDBCSLeadByte
lstrcatA
MultiByteToWideChar
lstrlenW
RaiseException
GetLastError
lstrcmpiA
GetProcAddress
WaitForMultipleObjects
GetModuleFileNameA
LoadLibraryExA
CreateMutexA
DeleteCriticalSection
CloseHandle
SetEvent
ResetEvent
CreateThread
lstrcpyA
lstrcpynA
CreateFileA
WriteFile
Sleep
ReadFile
OpenEventA
GetCurrentProcess
GetTickCount
GetVersionExA
GetCurrentProcessId
GetTempPathA
LocalFree
DeleteFileA
FileTimeToSystemTime
FormatMessageW
GetLocalTime
GetCurrentThreadId
PeekNamedPipe
SetHandleInformation
GetExitCodeProcess
CreateProcessA
TerminateProcess
GetUserDefaultUILanguage
GetFileAttributesA
GetStdHandle
LoadLibraryExW
GetModuleHandleExA
GetModuleHandleExW
LoadLibraryW
CreateFileW
SetFilePointerEx
InitializeCriticalSection
ClearCommBreak
WriteProfileStringA
LocalShrink
FillConsoleOutputCharacterA
RemoveDirectoryA
GetComputerNameExA
WaitForSingleObjectEx
FindFirstChangeNotificationA
SetCriticalSectionSpinCount
SetCommMask
AllocConsole
GetComputerNameW
HeapDestroy
AssignProcessToJobObject
SetCommTimeouts
UnregisterWaitEx
lstrcpynW
SetCurrentDirectoryA
SetConsoleCP
GetOverlappedResult
GetLogicalDriveStringsA
GetFileTime
GetPrivateProfileStringW
GetVolumeNameForVolumeMountPointA
FormatMessageA
LocalAlloc
FindClose
FindFirstFileW
FindNextFileW
GetVersion
ExitProcess
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetACP
GetOEMCP
SetHandleCount
GetStartupInfoA
VirtualFree
LCMapStringA
GetStringTypeA
LoadLibraryA
FlushFileBuffers
SetFilePointer
GetModuleHandleA
SetErrorMode
user32
LoadCursorFromFileW
AppendMenuW
LockWindowUpdate
GetSysColor
SendMessageCallbackA
InsertMenuItemA
GetKeyboardType
DdeInitializeA
OpenDesktopA
CreateWindowStationA
GetDC
LoadCursorW
LoadIconA
LoadCursorA
GetLastActivePopup
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
BeginPaint
GetClientRect
DrawTextA
EndPaint
PostQuitMessage
gdi32
GetStockObject
CreateHatchBrush
ExtTextOutW
RemoveFontResourceTracking
GetStretchBltMode
GetKerningPairs
SelectClipRgn
SetDIBColorTable
Ellipse
PaintRgn
SaveDC
GetColorSpace
comdlg32
GetSaveFileNameW
advapi32
FreeSid
RegOpenKeyW
GetUserNameA
RegQueryValueExA
shell32
Shell_NotifyIconA
SHGetFolderPathW
ShellExecuteA
ShellHookProc
ExtractAssociatedIconA
SHAppBarMessage
SHGetFolderLocation
SHBindToParent
DragFinish
DragQueryFileAorW
ExtractAssociatedIconExW
ShellExecuteExW
Shell_NotifyIconW
SHGetFileInfoA
ExtractIconExA
SHBrowseForFolderA
ole32
OleCreate
shlwapi
StrRChrW
StrCmpNA
StrRStrIA
winmm
PlaySoundA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 248KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ