Static task
static1
Behavioral task
behavioral1
Sample
fa34c2dda28c1f8d2fe095456db5a8db_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa34c2dda28c1f8d2fe095456db5a8db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa34c2dda28c1f8d2fe095456db5a8db_JaffaCakes118
-
Size
368KB
-
MD5
fa34c2dda28c1f8d2fe095456db5a8db
-
SHA1
50a44f8fe9a3719d6f25cd654bbc1dafe09bd9e5
-
SHA256
2e99f10b2bd929a318e3514bfd88ac809b574ca907a8f32ea76026848a8bad38
-
SHA512
988e5e1606b100ee81255e2e1946855f1d43bed512e14532d0740f63939d5aee3c5fd13a26406716b16833f08d7d0c974ef0070b78b02fd62c9768d88e37ff2e
-
SSDEEP
6144:jIQgiR2A4w9D+bhz932+j9olbt02Fn1WuB+/uNi3xU8lpwMnblrF/LTj3Meej:jIQsw9Cbz3xj9ornFB+/u4y8l5BF/LT8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa34c2dda28c1f8d2fe095456db5a8db_JaffaCakes118
Files
-
fa34c2dda28c1f8d2fe095456db5a8db_JaffaCakes118.exe windows:5 windows x86 arch:x86
fe01bd42cc589494fb86166913cafb80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryValueExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
RegDeleteValueW
RegSaveKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
RegEnumValueW
CryptAcquireContextW
CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
CryptReleaseContext
RegCloseKey
RegQueryValueExW
EqualSid
RegQueryInfoKeyW
CloseServiceHandle
StartServiceW
GetUserNameW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegCreateKeyExW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyExW
FreeSid
RegOpenKeyExA
gdi32
SelectObject
CreateFontIndirectW
GetObjectW
GetCurrentObject
DeleteObject
kernel32
HeapAlloc
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
DeleteFileW
GetVersion
HeapFree
GetLastError
GetProcAddress
LoadLibraryW
TlsGetValue
TlsSetValue
IsBadCodePtr
GetModuleHandleW
IsBadWritePtr
WideCharToMultiByte
GetACP
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
ResetEvent
LocalAlloc
LocalFree
CloseHandle
ReleaseMutex
GetCurrentThreadId
MultiByteToWideChar
IsBadStringPtrA
IsBadStringPtrW
DeleteCriticalSection
TlsFree
FreeLibrary
SetEvent
InitializeCriticalSection
CreateMutexW
TlsAlloc
GetProcessHeap
GetTickCount
Sleep
GetComputerNameW
GetCurrentProcessId
IsBadReadPtr
lstrlenW
lstrlenA
FreeLibraryAndExitThread
CreateThread
CreateEventW
lstrcmpiW
GetModuleFileNameW
OutputDebugStringW
msvcrt
wcslen
_wcsicmp
free
wcscpy
iswctype
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_except_handler3
_wtol
wcscspn
wcscat
iswdigit
wcscmp
__CxxFrameHandler
wcschr
_wtoi
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
_vsnprintf
wcsrchr
rpcrt4
RpcStringFreeW
NdrClientCall2
I_RpcExceptionFilter
RpcBindingFree
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingSetAuthInfoW
rtutils
TraceDeregisterW
TraceRegisterExW
TraceVprintfExA
shlwapi
ord217
ord346
StrChrW
StrToIntW
ord191
StrCmpIW
StrCmpW
StrCpyNW
StrCmpNW
user32
PostMessageW
DestroyWindow
DefWindowProcW
RegisterClassW
LoadStringW
GetUserObjectInformationW
GetThreadDesktop
GetSystemMetrics
IsWindow
wsprintfA
wsprintfW
SendMessageW
EnableWindow
GetDlgItem
SendDlgItemMessageW
EndDialog
GetClientRect
CheckRadioButton
SetWindowTextW
SetFocus
GetFocus
GetWindowTextW
SetWindowLongW
GetWindowLongW
DialogBoxParamW
GetParent
MessageBeep
SetForegroundWindow
EnumWindows
MessageBoxW
IsWindowEnabled
ShowWindow
GetKeyState
SetWindowPos
CreateWindowExW
KillTimer
SetTimer
GetWindowRect
CloseClipboard
CallWindowProcW
SetClipboardData
GetClipboardData
OpenClipboard
EnumChildWindows
SetDlgItemInt
GetDlgItemInt
WinHelpW
GetActiveWindow
winmm
waveInMessage
waveOutMessage
midiInMessage
midiOutMessage
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 332KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ