Static task
static1
Behavioral task
behavioral1
Sample
055fd6e37a4e1e1a3b40f7df0c4820d1_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
055fd6e37a4e1e1a3b40f7df0c4820d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
055fd6e37a4e1e1a3b40f7df0c4820d1_JaffaCakes118
-
Size
502KB
-
MD5
055fd6e37a4e1e1a3b40f7df0c4820d1
-
SHA1
6d1bb2aa638a1b2579f0dbfa37af77f5a551a169
-
SHA256
e68bd9f363e98c266de68b9a17c1d78e17bcf0c69502ee66c82a629752b5cfda
-
SHA512
7e234f27635a17f7fa86f29614060d7479b4ffc48968ce00eabd1e007f19acbd2d64a1d777f037a575b78731343b8692bd4d8ee17f29534196aea6ed03b1ff00
-
SSDEEP
12288:7okbeUIpxd0uehzHCoKkPq6MXILUBxfssLd06ySK:7blIpxWVzHgS2xkedg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 055fd6e37a4e1e1a3b40f7df0c4820d1_JaffaCakes118
Files
-
055fd6e37a4e1e1a3b40f7df0c4820d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
1ff01217b9d2347ff02f708c89779544
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetKerningPairs
SetTextCharacterExtra
GetAspectRatioFilterEx
CopyEnhMetaFileW
SetBkMode
GdiPlayJournal
ModifyWorldTransform
GetTextFaceW
Chord
AnimatePalette
FillPath
GetDCOrgEx
SetColorAdjustment
SelectPalette
GetMetaFileBitsEx
CreateDIBPatternBrush
GetPixel
PlayMetaFile
DeleteObject
GetNearestColor
CreatePenIndirect
GetBoundsRect
EnumICMProfilesA
ExtCreatePen
kernel32
GetLocaleInfoW
GetStartupInfoA
MoveFileW
GetSystemInfo
RtlFillMemory
CompareStringA
EnumSystemCodePagesW
GetUserDefaultLCID
GetLocalTime
SetFilePointer
GetStringTypeW
LoadModule
FlushFileBuffers
TlsAlloc
EnumDateFormatsExW
LCMapStringW
WideCharToMultiByte
GetStdHandle
VirtualAlloc
GetTickCount
CloseHandle
IsValidLocale
GetLastError
GetEnvironmentStringsW
LoadLibraryA
MultiByteToWideChar
IsBadWritePtr
EnterCriticalSection
FreeEnvironmentStringsW
WriteFile
GetCommandLineA
GetSystemTimeAsFileTime
GetOEMCP
GetStringTypeA
FileTimeToDosDateTime
GetCPInfo
TlsFree
RtlUnwind
HeapSize
HeapReAlloc
GetACP
EnumDateFormatsA
VirtualProtect
HeapCreate
CreateMutexA
SetEnvironmentVariableA
InitializeCriticalSection
GetProcAddress
FreeEnvironmentStringsA
GetCurrentThread
VirtualFree
GetFileType
HeapFree
lstrcpyW
SetLastError
LeaveCriticalSection
UnhandledExceptionFilter
GetCurrentProcess
GetModuleFileNameA
GetTimeFormatA
GetLocaleInfoA
GetCurrentThreadId
FindFirstFileExA
OpenMutexA
VirtualQuery
GlobalGetAtomNameW
LCMapStringA
GetEnvironmentStrings
DeleteCriticalSection
EnumSystemLocalesA
ReadFile
WriteConsoleOutputA
InterlockedExchange
TlsSetValue
GetModuleHandleA
SetHandleCount
GetModuleFileNameW
CompareStringW
HeapAlloc
IsValidCodePage
TerminateProcess
SetStdHandle
ExitProcess
SetPriorityClass
TlsGetValue
GetTimeZoneInformation
GetNumberFormatW
GetCurrentProcessId
QueryPerformanceCounter
GetDateFormatA
GetVersionExA
HeapDestroy
advapi32
CryptHashData
RegCreateKeyW
CryptExportKey
RegFlushKey
RevertToSelf
RegQueryValueW
LookupPrivilegeDisplayNameW
RegCloseKey
RegEnumKeyW
CreateServiceA
RegCreateKeyA
CryptDestroyKey
ReportEventW
RegOpenKeyA
CryptSetHashParam
CryptSetProviderA
RegLoadKeyA
RegSaveKeyA
CryptEnumProvidersA
CryptVerifySignatureA
RegSaveKeyW
comctl32
InitCommonControlsEx
user32
EnumClipboardFormats
DdeDisconnect
RegisterClassExA
CharToOemBuffA
EnumPropsW
LockWindowUpdate
ShowScrollBar
VkKeyScanA
EnumWindowStationsA
LoadIconW
DdeAddData
GetClipboardSequenceNumber
UnregisterClassW
EnumWindowStationsW
DlgDirSelectComboBoxExW
GetTabbedTextExtentA
GetClassLongW
GrayStringW
RegisterClassA
GetMenuDefaultItem
SetClipboardData
GetWindowInfo
CreateDesktopW
CharLowerBuffA
DdeAccessData
wininet
InternetGetLastResponseInfoW
ResumeSuspendedDownload
FindNextUrlCacheEntryW
InternetCheckConnectionA
CommitUrlCacheEntryA
InternetCloseHandle
DeleteUrlCacheContainerW
RunOnceUrlCache
Sections
.text Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ