Static task
static1
Behavioral task
behavioral1
Sample
0688ff4c9b441e370ec8b99924a5eedf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0688ff4c9b441e370ec8b99924a5eedf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0688ff4c9b441e370ec8b99924a5eedf_JaffaCakes118
-
Size
354KB
-
MD5
0688ff4c9b441e370ec8b99924a5eedf
-
SHA1
f664105feedaca7b7a6096f366e91e97399df1e8
-
SHA256
0eb4e854e4b11b00303491b8e696154218bb6a7e194129d73b93f85ac3b82c2a
-
SHA512
1e6fddfd5d7386225de28eaae2224cb00ac7d756f097e91683827e4b3d3f4a0cee130280bc73734b0ef93171d3a92a6bdb8e3ac9eb5e2fbf9a7ae5e65a0b81f7
-
SSDEEP
6144:q5yogQ+F5Vp2VFAiWMSQvZuefrZ7wQbRTBll7tAOa++AAMZsR:q5yogQ+LQFA1gZuefrJwQ9Trl7t7Lts
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0688ff4c9b441e370ec8b99924a5eedf_JaffaCakes118
Files
-
0688ff4c9b441e370ec8b99924a5eedf_JaffaCakes118.exe windows:4 windows x86 arch:x86
0009c1af8a570800fc7fdf7db5d6926f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
CreateFileA
GetModuleFileNameA
LoadLibraryExW
SearchPathW
LoadLibraryA
TerminateProcess
Sleep
WinExec
CreateJobObjectW
GetSystemDirectoryW
WideCharToMultiByte
ExitProcess
DeleteFileW
SearchPathA
GetShortPathNameA
MultiByteToWideChar
GetLastError
CreateMutexW
ReadFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemTime
SystemTimeToFileTime
GetModuleHandleW
LockResource
LoadResource
GetTickCount
FindResourceA
CreateFileW
CloseHandle
WriteFile
AllocateUserPhysicalPages
GetShortPathNameW
SizeofResource
GetModuleHandleA
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapSize
GetStdHandle
HeapCreate
HeapAlloc
HeapFree
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
ExitThread
ResumeThread
CreateThread
GetVersionExA
GetProcessHeap
GetStartupInfoW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
user32
DialogBoxParamW
GetMessageW
TranslateMessage
DispatchMessageW
UpdateWindow
CreateWindowExA
GetWindowLongA
MoveWindow
GetDC
UnregisterClassW
SetTimer
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
GetClientRect
CreateWindowExW
DrawTextW
GetWindowDC
ReleaseDC
ShowWindow
SetDlgItemTextA
GetDesktopWindow
GetWindowRect
SetWindowLongW
gdi32
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW
advapi32
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
shell32
SHGetFolderPathA
rpcrt4
UuidCreate
RpcStringFreeW
UuidToStringW
wininet
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
Sections
.text Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ