Static task
static1
Behavioral task
behavioral1
Sample
ffcac68692534719a5e4b67756b73e0f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffcac68692534719a5e4b67756b73e0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffcac68692534719a5e4b67756b73e0f_JaffaCakes118
-
Size
3.4MB
-
MD5
ffcac68692534719a5e4b67756b73e0f
-
SHA1
34f895a9b7d364900798f10c23f6e34f54dbc054
-
SHA256
02338bc924a6dc4cc402d7fc1064ae86044642fd44fbbc1a84d7b00eb128b987
-
SHA512
470278b4c8ffa69fd06361dc953828810bd38cb51c56177e0c98dc51f5dd0211c1273a31b9a5cfaf7ec6793ea6c9b12789f8083fff750d91c84e486eb65c99be
-
SSDEEP
24576:ady2CNmHVgex+MOE4NBiyiL1+EgUunfBN1+FXvBjW/Bq+iVoLSjcM+yFvORMNjQq:e/jKzkytOWJ19LSjc6giF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffcac68692534719a5e4b67756b73e0f_JaffaCakes118
Files
-
ffcac68692534719a5e4b67756b73e0f_JaffaCakes118.exe windows:5 windows x86 arch:x86
403543939939cdab2024918c56ff10cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringW
GetModuleHandleW
lstrcmpW
TzSpecificLocalTimeToSystemTime
GetSystemInfo
GetSystemTimeAsFileTime
GetStringTypeW
VirtualAllocEx
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
GetCommandLineW
IsProcessorFeaturePresent
GetLastError
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EnterCriticalSection
LeaveCriticalSection
HeapFree
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
IsDebuggerPresent
LoadLibraryExW
RtlUnwind
HeapAlloc
HeapReAlloc
HeapSize
CreateFileW
gdi32
GetKerningPairsW
EndDoc
GetStretchBltMode
GetCurrentPositionEx
CreateScalableFontResourceW
BitBlt
ColorMatchToTarget
shell32
SHGetFileInfoW
SHBrowseForFolderW
ShellExecuteExW
user32
GetDC
SendDlgItemMessageW
SetMenuDefaultItem
UnregisterClassW
CheckRadioButton
opengl32
wglCreateContext
Sections
.text Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3.2MB - Virtual size: 9.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ