Static task
static1
Behavioral task
behavioral1
Sample
fa778a459ea7695f97a4a3782d88c0ae_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fa778a459ea7695f97a4a3782d88c0ae_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fa778a459ea7695f97a4a3782d88c0ae_JaffaCakes118
-
Size
188KB
-
MD5
fa778a459ea7695f97a4a3782d88c0ae
-
SHA1
42fa3a4a1d0b1176c47d7823070d5cf6e12cac14
-
SHA256
58feb667600ad940db61471bf7edca819cd7f3fc6648843786eb70196284c348
-
SHA512
69faee47d7f8b1d12c9a00e6c93fd7b6438fcab5a8aa172e3f5ac1295d29cf2ee639f2ea9013082e0ec2c654ea6823f257d1ab3f893c8366695b6675886d5ae2
-
SSDEEP
3072:r3zB6H/L5pqp+l+suCSXs9doqopRzj75dHGSuvQLz0j6:r3zBqLnv+nCn2zjXmS1n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa778a459ea7695f97a4a3782d88c0ae_JaffaCakes118
Files
-
fa778a459ea7695f97a4a3782d88c0ae_JaffaCakes118.exe windows:5 windows x86 arch:x86
82d1f3d0b4106ad2c25aedb56caf6935
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
DeleteFileA
GetSystemDefaultLangID
GetFileSize
GetCurrentProcess
FormatMessageA
WriteFile
LeaveCriticalSection
ReadFile
FlushInstructionCache
SetCurrentDirectoryA
SetLastError
EnterCriticalSection
GetCurrentThreadId
GetVersionExA
GetModuleFileNameA
WaitForSingleObject
GetTickCount
GetExitCodeProcess
CreateProcessA
GetEnvironmentVariableA
GetCurrentDirectoryA
CompareStringA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
DebugBreak
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
GetStdHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
HeapSize
HeapReAlloc
HeapCreate
GetStartupInfoA
GetCommandLineA
CloseHandle
OutputDebugStringA
GetModuleHandleA
FindNextFileA
GetDiskFreeSpaceA
ExitProcess
LoadLibraryA
FindClose
SetFileAttributesA
RemoveDirectoryA
GetProcAddress
GetLastError
FindFirstFileA
CreateDirectoryA
RaiseException
lstrlenW
MultiByteToWideChar
GetSystemDirectoryA
WideCharToMultiByte
GetWindowsDirectoryA
SetFileTime
InterlockedDecrement
InterlockedIncrement
FreeLibrary
lstrlenA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
DeleteCriticalSection
InitializeCriticalSection
CreateFileA
LCMapStringA
VirtualQuery
user32
LoadStringA
CharNextA
wvsprintfA
UnregisterClassA
GetWindow
MsgWaitForMultipleObjects
CharUpperA
SetCursor
SetTimer
GetWindowRect
SendDlgItemMessageA
FillRect
KillTimer
GetParent
wsprintfA
GetClientRect
GetWindowTextLengthA
SendMessageA
GetMonitorInfoA
TranslateMessage
GetWindowTextA
SetWindowLongA
MessageBoxA
InvalidateRect
GetWindowLongA
PeekMessageA
MonitorFromWindow
GetDlgItem
EndDialog
RedrawWindow
DestroyCursor
GetDesktopWindow
SetWindowPos
CheckDlgButton
EnumChildWindows
ShowWindow
GetSysColorBrush
IsDlgButtonChecked
IsWindow
DispatchMessageA
GetSystemMetrics
SetWindowTextA
LoadImageA
MapWindowPoints
EnableWindow
LoadCursorA
GetDlgCtrlID
GetDlgItemTextA
DialogBoxParamA
SetDlgItemTextA
gdi32
AddFontResourceA
BitBlt
SetTextColor
DeleteDC
CreateDIBSection
StretchBlt
CreateFontIndirectA
SetBkMode
DeleteObject
CreateCompatibleDC
SetStretchBltMode
GetObjectA
GetStockObject
CreateSolidBrush
SelectObject
advapi32
OpenSCManagerA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CloseServiceHandle
CreateServiceW
RegCloseKey
shell32
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteExA
SHGetSpecialFolderLocation
SHBrowseForFolderA
ole32
CLSIDFromProgID
StringFromGUID2
OleInitialize
OleUninitialize
CoCreateInstance
oleaut32
SysAllocString
SysAllocStringByteLen
VarBstrCmp
SysAllocStringLen
SysStringByteLen
SysFreeString
SysStringLen
BstrFromVector
VariantClear
VariantCopyInd
LoadTypeLi
VariantCopy
VariantInit
VariantChangeType
RegisterTypeLi
comctl32
ord17
Sections
.text Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ