Static task
static1
Behavioral task
behavioral1
Sample
05d63613c88ce76b926634a7ddb28bfd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05d63613c88ce76b926634a7ddb28bfd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05d63613c88ce76b926634a7ddb28bfd_JaffaCakes118
-
Size
384KB
-
MD5
05d63613c88ce76b926634a7ddb28bfd
-
SHA1
ce639f8d117ebd8c5590c5c43292f28d7bb4c60e
-
SHA256
3f0a36c761620e89341659184b43bf016b52ac4357efc1e7e0f3f4588f4d834c
-
SHA512
83d572e7aad8fbb9abd80d5659a1b9c5e4996fe07972219b51f0eb503503def1e090960ef6089ec3fb7e30e57d8658dfa9849efed51f0eb064e634318ae77f2e
-
SSDEEP
6144:h/V1zsXHuKCQHPsYzbFKsWu/djNL0WjObZ/CXvb:hN1ztKCQHPNzbFnWwjNLzObd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05d63613c88ce76b926634a7ddb28bfd_JaffaCakes118
Files
-
05d63613c88ce76b926634a7ddb28bfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
450961b2618f44b8617e48df035e5c9c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCPInfo
CreateFileA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
CompareStringW
SetEndOfFile
GetStringTypeW
GetStringTypeA
FlushFileBuffers
RaiseException
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
GetACP
GetOEMCP
LoadLibraryA
CompareStringA
Sleep
SetUnhandledExceptionFilter
DeleteFileA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
IsBadWritePtr
VirtualAlloc
GetUserDefaultLangID
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
MultiByteToWideChar
GetLastError
CreateThread
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateEventA
GetModuleHandleA
SetEvent
ResetEvent
WaitForSingleObject
CloseHandle
RtlUnwind
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
GetCurrentProcess
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
GetCommandLineA
GetVersion
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
ResumeThread
TlsSetValue
ExitThread
HeapReAlloc
GetProcAddress
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
HeapSize
ReadFile
WriteFile
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
user32
LoadIconA
ShowWindow
SetCursor
DefWindowProcA
PostQuitMessage
DestroyWindow
WaitMessage
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
UpdateWindow
SetFocus
CreateWindowExA
GetSystemMetrics
RegisterClassA
LoadCursorA
MsgWaitForMultipleObjects
gdi32
GetStockObject
advapi32
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
winmm
mmioOpenA
mmioRead
mmioClose
mmioAscend
mmioDescend
mmioSeek
timeGetTime
dinput
DirectInputCreateEx
dsound
ord1
ddraw
DirectDrawCreateEx
DirectDrawEnumerateExA
wininet
InternetSetFilePointer
HttpAddRequestHeadersA
InternetDial
InternetConnectA
InternetCloseHandle
InternetSetOptionA
InternetOpenA
HttpOpenRequestA
InternetReadFile
HttpSendRequestA
Sections
.text Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ