Static task
static1
Behavioral task
behavioral1
Sample
0683b586f3b9ea7a06d4d31555f31f80_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0683b586f3b9ea7a06d4d31555f31f80_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0683b586f3b9ea7a06d4d31555f31f80_JaffaCakes118
-
Size
284KB
-
MD5
0683b586f3b9ea7a06d4d31555f31f80
-
SHA1
fcb363f301e69fec076701ae315a4f2d72c3272f
-
SHA256
9acb1994576f5fc40a2674d0eba22f4c03bc2e59367996acf2738b00f4be9935
-
SHA512
1383bd05be945aade02367c6b81169ce06f45ea74eec6846d4aed1d5a17301a001a0dc5206305c27b8488b6aafa5f5d9176a0be22ead5e68c0030f73f7621d16
-
SSDEEP
6144:xqK7cP37I4t5LNrRxCHdURiCBECpoYaS:5+I4j098YCSYa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0683b586f3b9ea7a06d4d31555f31f80_JaffaCakes118
Files
-
0683b586f3b9ea7a06d4d31555f31f80_JaffaCakes118.exe windows:5 windows x86 arch:x86
439b5ff65f6929d6b735463cd7870192
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
SetEndOfFile
SetLastError
UnhandledExceptionFilter
UnmapViewOfFile
WideCharToMultiByte
MulDiv
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
MapViewOfFile
LocalUnlock
LocalSize
LocalReAlloc
LocalLock
LocalFree
LocalAlloc
LoadLibraryA
GlobalFree
GetUserDefaultUILanguage
GetStartupInfoA
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetCurrentProcessId
GetCommandLineW
GetACP
FormatMessageW
FoldStringW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CompareStringW
CloseHandle
GetModuleHandleA
GetProcAddress
WriteFile
ReadFile
user32
GetMenuState
GetMessageW
GetMenu
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
GetWindowTextW
InvalidateRect
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
LoadAcceleratorsW
LoadCursorW
LoadImageW
LoadStringW
MessageBeep
MessageBoxW
MoveWindow
OpenClipboard
PeekMessageW
PostMessageW
PostQuitMessage
RegisterClassExW
RegisterWindowMessageW
ReleaseDC
ScreenToClient
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDlgItemTextW
SetFocus
SetScrollPos
SetWinEventHook
SetWindowLongW
SetWindowPlacement
SetWindowTextW
ShowWindow
TranslateAcceleratorW
TranslateMessage
UnhookWinEvent
UpdateWindow
WinHelpW
wsprintfW
GetKeyboardLayout
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextExW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DefWindowProcW
CreateWindowExW
CreateDialogParamW
CloseClipboard
ChildWindowFromPoint
CheckMenuItem
CharUpperW
CharNextW
CharLowerW
LoadIconW
LoadIconA
GetParent
gdi32
CreateDCW
CreateFontIndirectW
DeleteDC
DeleteObject
EndDoc
EndPage
EnumFontsW
GetDeviceCaps
GetObjectW
GetTextExtentPoint32W
GetTextFaceW
AbortDoc
LPtoDP
SelectObject
SetAbortProc
SetBkMode
SetMapMode
SetViewportExtEx
SetWindowExtEx
StartDocW
StartPage
TextOutW
CreateDCA
GetTextMetricsW
GetStockObject
advapi32
RegQueryValueExW
RegOpenKeyExA
msvcrt
memcpy
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data3 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ