Static task
static1
Behavioral task
behavioral1
Sample
ff4d9b32e3d2c179ed27fe877e3efed6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff4d9b32e3d2c179ed27fe877e3efed6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff4d9b32e3d2c179ed27fe877e3efed6_JaffaCakes118
-
Size
2.0MB
-
MD5
ff4d9b32e3d2c179ed27fe877e3efed6
-
SHA1
1a88222763592adf4b77afacb6ab272be58605ac
-
SHA256
f4a5123d126bb16314203126fbd49137055a41d9caf56aa5f4b8dafb0c415f5c
-
SHA512
179e1455384e601c30e3be47d22dd3b639ff2da91c1b1386096fd965403079c98d46a33b6b6ff8d6677407e498014521798fb430053552074b3b381d6bf5fbba
-
SSDEEP
24576:/rzFFF+98SBd+VDGh3dWb86rVixT0hgGH8jV9D:/rNEeGhNbYhbW/D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff4d9b32e3d2c179ed27fe877e3efed6_JaffaCakes118
Files
-
ff4d9b32e3d2c179ed27fe877e3efed6_JaffaCakes118.exe windows:5 windows x86 arch:x86
9bc3c025e06554761c3e1ea6deb43772
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
VirtualAlloc
ExitProcess
WaitForSingleObject
WaitForMultipleObjects
SetEndOfFile
MulDiv
FormatMessageW
lstrcmpW
TlsFree
CreateMutexW
OpenWaitableTimerW
CreateFileMappingW
GetModuleFileNameW
FindResourceW
FindResourceExW
GetPrivateProfileStructW
GetTempPathW
FindFirstFileExW
FindNextFileW
GetUserDefaultLCID
GetConsoleWindow
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetStdHandle
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
GetModuleHandleExW
DecodePointer
CreateFileW
GetCurrentThreadId
SetLastError
GetLastError
EncodePointer
IsProcessorFeaturePresent
RaiseException
GetCommandLineW
user32
GetRawInputBuffer
GetComboBoxInfo
GetMonitorInfoW
SystemParametersInfoW
EnumDisplayDevicesW
LoadImageW
CreateIcon
FindWindowExW
SetParent
InvertRect
CreateCaret
MessageBoxW
SetScrollRange
ScrollWindowEx
RedrawWindow
UpdateWindow
DrawIcon
SetMenuDefaultItem
GetMenuState
LoadAcceleratorsW
KillTimer
GetKeyboardType
GetFocus
RegisterClipboardFormatW
GetClipboardData
GetClipboardViewer
GetDlgItemInt
SetDlgItemInt
BeginDeferWindowPos
SetWindowPlacement
FlashWindowEx
DefWindowProcW
TranslateMessage
opengl32
glClearDepth
glClear
glColorMask
glCopyTexImage2D
glDeleteTextures
glDepthFunc
glDepthMask
glDrawArrays
glGenTextures
glGetError
glGetString
glTexImage2D
glTexParameteri
glBindTexture
setupapi
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInfoListDetailW
SetupDiCreateDeviceInfoListExW
SetupCloseFileQueue
SetupGetStringFieldW
SetupDiBuildDriverInfoList
SetupGetLineCountW
SetupFindNextLine
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenInfFileW
SetupDiEnumDriverInfoW
SetupDiGetClassDevsExW
SetupDiCallClassInstaller
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
CM_Get_Device_IDW
CM_Get_Device_ID_ExW
CM_Get_DevNode_Registry_Property_ExW
CM_Locate_DevNodeW
CM_Get_Parent_Ex
CM_Get_DevNode_Status
CM_Get_Parent
SetupGetFieldCount
SetupDiGetClassDevsW
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 703KB - Virtual size: 7.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.g1ads Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8as1 Size: 416KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e6m8 Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.t8wt5l Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ