Static task
static1
Behavioral task
behavioral1
Sample
07c7cc89be511dafb94fc4700fe599bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07c7cc89be511dafb94fc4700fe599bb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
07c7cc89be511dafb94fc4700fe599bb_JaffaCakes118
-
Size
279KB
-
MD5
07c7cc89be511dafb94fc4700fe599bb
-
SHA1
02739223ad5b7c4f9b6bdb1a106d3085444b320e
-
SHA256
1adffa39694a9a8619de4ddb1dc3b37bb3d1cd5decd4095841f5c3562d216aa3
-
SHA512
f45d5c91d164624740702c9423a310397f9b7a86e820dffb1667f306535c1e25ef825e0b6db5d26aa8f53954dea43b5a7e6bf747e0cd8aec925de3913c231608
-
SSDEEP
6144:KrKUbWpYs1ChLawBiECggGaFXddyzJgR5yuOAe/jRQIEaJ086Jqxnngg:TBptChew4ECgAR509J0ZSng
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c7cc89be511dafb94fc4700fe599bb_JaffaCakes118
Files
-
07c7cc89be511dafb94fc4700fe599bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
d83d80f332c141abf10543f9044b608a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetFileTitleW
GetFileTitleA
GetSaveFileNameW
PageSetupDlgA
ChooseFontA
wininet
InternetSetOptionA
FtpPutFileW
FtpRemoveDirectoryW
GetUrlCacheHeaderData
InternetTimeToSystemTimeW
FtpGetCurrentDirectoryW
FindNextUrlCacheEntryW
InternetTimeFromSystemTimeW
GopherGetAttributeA
FtpRenameFileA
InternetSecurityProtocolToStringW
GetUrlCacheConfigInfoW
InternetQueryOptionA
InternetSetOptionExA
InternetQueryOptionW
InternetCanonicalizeUrlA
InternetSetDialStateW
shell32
SHGetSettings
SHChangeNotify
ExtractAssociatedIconW
SHGetPathFromIDList
SHGetInstanceExplorer
SheGetDirA
user32
GetInputState
DlgDirListComboBoxW
DlgDirListW
CharToOemA
LoadCursorA
SetActiveWindow
LoadCursorFromFileA
LoadIconA
SetMenu
GetWindowThreadProcessId
CharUpperW
GetWindowInfo
CreateMenu
GetMenuItemID
kernel32
ExitProcess
SetFileAttributesA
HeapReAlloc
LCMapStringA
EnumTimeFormatsW
GetEnvironmentStringsA
TerminateProcess
InterlockedDecrement
GetTimeZoneInformation
SetLastError
GetStringTypeA
WideCharToMultiByte
GetStringTypeW
HeapFree
FreeEnvironmentStringsW
LeaveCriticalSection
WriteFile
SetHandleCount
GetTickCount
TlsSetValue
GetACP
TlsAlloc
HeapCreate
SetEnvironmentVariableA
GetCurrentProcessId
CreateMutexW
FileTimeToDosDateTime
SetUnhandledExceptionFilter
DeleteCriticalSection
VirtualQuery
SetFilePointer
TlsGetValue
GetLastError
GetCPInfo
GetOEMCP
IsValidCodePage
InterlockedIncrement
GetLocaleInfoW
GetModuleFileNameA
LoadLibraryA
FormatMessageA
SetConsoleCtrlHandler
GetTimeFormatA
GetProcAddress
InitializeCriticalSectionAndSpinCount
CreateNamedPipeW
GetModuleFileNameW
GetEnvironmentStringsW
GetLocaleInfoA
HeapAlloc
FileTimeToSystemTime
UnhandledExceptionFilter
CompareStringA
Sleep
GetModuleHandleA
QueryPerformanceCounter
IsValidLocale
CompareStringW
GetSystemTimeAsFileTime
LCMapStringW
GetCurrentProcess
GetStartupInfoA
HeapDestroy
VirtualFree
GetCurrentThread
EnterCriticalSection
GetModuleHandleW
CloseHandle
CreateDirectoryExA
EnumSystemLocalesA
GetStartupInfoW
RtlUnwind
GetPrivateProfileStringA
GetFileType
GlobalDeleteAtom
IsDebuggerPresent
GetUserDefaultLCID
GetStdHandle
GetCommandLineW
InterlockedExchange
OpenSemaphoreW
MultiByteToWideChar
GetProfileStringA
FindFirstFileA
GetDateFormatA
VirtualAlloc
GetCurrentThreadId
FreeLibrary
TlsFree
HeapSize
gdi32
PlayMetaFile
GdiPlayDCScript
PolyBezierTo
GetPixel
GetCharABCWidthsA
CreateBitmap
SetTextJustification
PlayMetaFileRecord
ExtFloodFill
ModifyWorldTransform
EnumFontFamiliesA
GetRegionData
BeginPath
PtInRegion
GetOutlineTextMetricsW
SetLayout
WidenPath
GetICMProfileW
DeleteObject
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ