Static task
static1
Behavioral task
behavioral1
Sample
074d1b310c32586186acd8cf9c690cc0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
074d1b310c32586186acd8cf9c690cc0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
074d1b310c32586186acd8cf9c690cc0_JaffaCakes118
-
Size
183KB
-
MD5
074d1b310c32586186acd8cf9c690cc0
-
SHA1
6ea0338ea603f11813d943586f7e5a4cf7784053
-
SHA256
5b4b98625ebc0170fd97c36cfb8e2166a8b6642bafabb6d0799ced0417360e3b
-
SHA512
d4593131da36754cc46b9fb3240c6c05dbd486ff003fc7984fd1f0ec13e51e888382102fdca5770e87e3f523169c9f3ea10ec50c627254368da08588f961524c
-
SSDEEP
3072:QcHiSDw77dGxel0pBvlon3UYfcFXODNUPZkmUbXbcLOzyTozKHYHU:QEW7wGiBdo3UwYOR7mGXbfmozKH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 074d1b310c32586186acd8cf9c690cc0_JaffaCakes118
Files
-
074d1b310c32586186acd8cf9c690cc0_JaffaCakes118.exe windows:5 windows x86 arch:x86
dc0dede97aed1257189f901f137d0489
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
ReadFile
WriteConsoleW
SetStdHandle
LCMapStringW
RtlUnwind
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
CreateFileW
GetCurrentProcess
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
WriteFile
MultiByteToWideChar
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetLocaleInfoW
GetUserDefaultLCID
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
WideCharToMultiByte
GetCurrentThreadId
CompareStringW
CloseHandle
LockResource
ResetEvent
GlobalFree
CreateConsoleScreenBuffer
GetLastError
GetStdHandle
GlobalUnlock
HeapCreate
WriteConsoleOutputA
SizeofResource
Sleep
LoadLibraryW
GlobalAlloc
SetEvent
ReadConsoleOutputA
GlobalLock
SetHandleCount
SetConsoleActiveScreenBuffer
FindResourceA
HeapAlloc
LoadResource
GetEnvironmentStringsW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
EncodePointer
DecodePointer
GetTimeFormatA
GetDateFormatA
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
IsProcessorFeaturePresent
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
SetEnvironmentVariableA
user32
GetDC
EndPaint
DestroyWindow
CloseClipboard
GetWindowRect
PostQuitMessage
TrackPopupMenu
FillRect
GetMenuItemID
SetForegroundWindow
DeleteMenu
GetParent
LoadIconA
GetClipboardFormatNameA
GetClientRect
CreateMenu
CheckMenuItem
SendMessageA
EnumClipboardFormats
BeginPaint
SetFocus
SetRect
InvalidateRect
CreateWindowExA
ReleaseDC
DefWindowProcA
SetWindowPos
GetCursorPos
ShowWindow
AppendMenuA
GetMenuItemCount
PostMessageA
OpenClipboard
GetSystemMetrics
IsWindowVisible
CountClipboardFormats
UpdateWindow
FindWindowA
LoadCursorA
gdi32
LineTo
EnumEnhMetaFile
GetEnhMetaFileA
CreateEnhMetaFileA
SetTextColor
GetDeviceCaps
SetBkMode
DeleteObject
SelectObject
PlayEnhMetaFile
CreatePen
GetTextMetricsA
GetStockObject
CloseEnhMetaFile
CreateSolidBrush
TextOutA
MoveToEx
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ole32
CreateStreamOnHGlobal
opengl32
glVertex3f
glBegin
glNormal3f
glEnd
glClear
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ