Static task
static1
Behavioral task
behavioral1
Sample
ffa99fe1c7df3f192b681270b27a658d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffa99fe1c7df3f192b681270b27a658d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffa99fe1c7df3f192b681270b27a658d_JaffaCakes118
-
Size
2.2MB
-
MD5
ffa99fe1c7df3f192b681270b27a658d
-
SHA1
26ce964761039f70d9ab3e66dad5dcf66964bcd3
-
SHA256
4d92fda4f24b6f1eb9550ea4fdd8e797c300811d54d79eea384a65d5516986b0
-
SHA512
fe0bd8752aa49703d79740ed129ed44cf6d6482d3cd799615718d6858de016dc2765c7f53a58537711d574ba56ab5810a69b64bf13aaacf0103aefe75ca41a52
-
SSDEEP
12288:CyEl6aUKPhivLI8ytIqGRtHWVl5v3WtQbRoUOfL3w3w4NQFWsJLcXt8Y2Lvl8nX7:CyEpUv/q2HUrvj6aa70wyDP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffa99fe1c7df3f192b681270b27a658d_JaffaCakes118
Files
-
ffa99fe1c7df3f192b681270b27a658d_JaffaCakes118.exe windows:5 windows x86 arch:x86
df0b1a98c23bee9a1f2424b04443e5ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
GetSpoolFileHandle
advapi32
RegDeleteValueW
OpenSCManagerW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
ntdsapi
DsBindW
DsCrackNamesW
user32
DdeNameService
TranslateMDISysAccel
GetParent
WindowFromPoint
MapWindowPoints
GetWindowRect
ScrollWindowEx
SetWindowRgn
InvertRect
InsertMenuW
KillTimer
MsgWaitForMultipleObjects
SetFocus
GetLayeredWindowAttributes
UnregisterClassW
SetMenuInfo
winscard
SCardGetStatusChangeW
kernel32
GetModuleHandleExW
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
GlobalAlloc
VirtualAlloc
GetEnvironmentStringsW
CreateFiberEx
InitializeCriticalSectionAndSpinCount
ReleaseSemaphore
WaitForSingleObject
InitAtomTable
SetHandleCount
SetEndOfFile
GetSystemTime
FlushViewOfFile
LoadLibraryExW
ExpandEnvironmentStringsW
FindResourceExW
GetPrivateProfileIntW
CreateDirectoryW
IsValidCodePage
WideCharToMultiByte
EnumDateFormatsExW
GetConsoleWindow
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetProcAddress
MultiByteToWideChar
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsProcessorFeaturePresent
IsDebuggerPresent
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
HeapFree
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 749KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.di4t Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.u74ws Size: 649KB - Virtual size: 648KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h25i Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l6nej Size: 225KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 362KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ