Static task
static1
Behavioral task
behavioral1
Sample
ffe054c6b498b0e6d9a531102b9fe1ad_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffe054c6b498b0e6d9a531102b9fe1ad_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ffe054c6b498b0e6d9a531102b9fe1ad_JaffaCakes118
-
Size
165KB
-
MD5
ffe054c6b498b0e6d9a531102b9fe1ad
-
SHA1
32a736a9e8631bb4e0abcb384b391ec2612f11b8
-
SHA256
19c1f8418cbdffc9ec288fa06c7549bbff816c88f1b4bf8b5ee8744ca912e135
-
SHA512
44906aed881af854791bf1a5a61de2abd8380fde0d3386f2d5c9a9db04210fcf40407cf6d5d279f71a8eaa305e752e4a39e1b010e0e8043e9caf09a28c926c19
-
SSDEEP
3072:jOaIZ0zMyYba76AcS/cHBz5s9RV/h9z8dupErlNlWUJvny30:jOarMw76PN2bz6XlnJo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffe054c6b498b0e6d9a531102b9fe1ad_JaffaCakes118
Files
-
ffe054c6b498b0e6d9a531102b9fe1ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
c1fbefb38d5c724c2900f9dd097b023b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
msvfw32
ICInfo
ole32
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoInitialize
kernel32
MapViewOfFile
GetConsoleCP
ReadFile
TlsFree
GetSystemDirectoryW
GetVDMCurrentDirectories
LockResource
RaiseException
GetLastError
WriteFile
IsDebuggerPresent
HeapCreate
GetSystemTimeAsFileTime
GetCurrentProcessId
GetConsoleMode
CloseHandle
GetStringTypeW
TlsSetValue
GetVersionExW
FlushInstructionCache
IsProcessorFeaturePresent
SetHandleCount
InterlockedDecrement
EnterCriticalSection
GetFileSize
lstrlenA
TlsGetValue
HeapReAlloc
SetLastError
InitializeCriticalSection
DeleteFileW
RtlUnwind
MulDiv
GetCommandLineW
GetACP
GetOEMCP
GetEnvironmentStrings
WriteConsoleW
GetEnvironmentStringsW
TerminateProcess
Sleep
FlushFileBuffers
GetStartupInfoA
LocalAlloc
SetThreadPriorityBoost
InterlockedExchange
InterlockedIncrement
HeapSize
GetThreadLocale
FreeEnvironmentStringsW
GetTickCount
SetStdHandle
HeapFree
WideCharToMultiByte
HeapAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
EnumResourceNamesW
CopyFileW
VirtualAlloc
DeleteCriticalSection
GetTempPathW
UnmapViewOfFile
SizeofResource
GetModuleFileNameA
InterlockedCompareExchange
lstrcmpA
LCMapStringA
GetCurrentThreadId
FreeEnvironmentStringsA
GetModuleFileNameW
WaitForSingleObject
CreateFileMappingW
VirtualFree
GetCommandLineA
GetModuleHandleW
GetStartupInfoW
GetModuleHandleA
LoadResource
GetFileType
CreateFileA
MultiByteToWideChar
LCMapStringW
SetUnhandledExceptionFilter
LeaveCriticalSection
WritePrivateProfileSectionW
UnhandledExceptionFilter
lstrcmpiW
LoadLibraryW
GetVersion
LoadLibraryA
CreateSemaphoreW
TlsAlloc
GetConsoleOutputCP
GetStdHandle
HeapDestroy
SetFilePointer
GetVersionExA
GetDriveTypeW
GetStringTypeA
GetProcAddress
WriteConsoleA
ExitProcess
GetCPInfo
GetFileAttributesW
GetCurrentProcess
GetLocaleInfoA
LoadLibraryExW
CreateProcessW
GetProcessHeap
CreateFileW
FindResourceW
LocalFree
FreeLibrary
GetTempFileNameW
lstrlenW
gdi32
CreateFontIndirectW
GetDeviceCaps
DeleteObject
user32
TranslateMessage
GetWindowTextLengthW
GetClientRect
BeginPaint
GetParent
RegisterClassExW
GetDlgItemTextW
PeekMessageW
EndPaint
SetCapture
GetClassInfoExW
MapWindowPoints
LoadCursorW
GetWindowRect
DestroyWindow
GetDC
GetWindowInfo
SetDlgItemTextW
MessageBoxW
DispatchMessageW
GetDlgItem
SetWindowTextW
SetWindowPos
SystemParametersInfoW
GetWindow
CreateWindowExW
EndDialog
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idive Size: 1024B - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ